Medium
CVE-2019-7872
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2019-7864
Magento 2 Community Edition IDOR Vulnerability
High
CVE-2019-7854
Magento 2 Community Edition IDOR Vulnerability
High
CVE-2019-1020002
Pterodactyl vulnerable to 2FA Sniffing
Medium
CVE-2019-13644
Firefly III vulnerable to stored XSS
Critical
CVE-2019-12468
Wikimedia MediaWiki Incorrect Access Control vulnerability
Medium
CVE-2019-12467
MediaWiki Incorrect Access Control vulnerability
Medium
CVE-2019-10134
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions
Medium
CVE-2019-10133
Moodle Open Redirect Vulnerability
Medium
CVE-2019-12616
phpMyAdmin CSRF Vulnerability
Critical
CVE-2017-11365
Symfony Incorrect Access Control
Critical
CVE-2019-11830
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
Critical
CVE-2017-16558
Contao SQL injection in the backend and listing module
High
CVE-2019-11514
Flarum mishandles invalidation of user email tokens
Critical
CVE-2022-30600
Incorrect Calculation in moodle
Medium
CVE-2022-30110
Cross-site Scripting in Jirafeau
Medium
CVE-2014-8328
DCE extension for Typo3 Discloses Environment Information
Critical
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
High
CVE-2008-6507
phpBB vulnerable to sensitive information disclosure
Low
CVE-2010-3094
Drupal cross-site scripting vulnerability via actions feature and trigger module
High
CVE-2010-3604
powermail extension for TYPO3 vulnerable to SQL Injection
High
CVE-2010-4481
phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information
Medium
CVE-2011-3744
HTML Purifier allows remote attackers to obtain sensitive information
Medium
CVE-2011-3712
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.