Medium
CVE-2019-17577
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Medium
CVE-2019-17578
Dolibarr Cross-site Scripting vulnerability
Critical
CVE-2019-16699
sr_freecap for Typo3 RCE Vulnerability
Critical
CVE-2019-16700
slub_events for Typo3 Arbitrary File Upload
Medium
CVE-2019-17223
Dolibarr ERP and CRM HTML Injection
High
CVE-2019-16682
url_redirect for Typo3 SQLi Vulnerability
Medium
CVE-2019-16698
direct_mail for Typo3 sensitive data exposure
Medium
CVE-2019-17496
Craft CMS XSS Vulnerability
Medium
CVE-2019-17433
z-song laravel-admin XSS via the Slug or Name on the Roles screen
High
CVE-2019-15715
MantisBT Remote Code Execution
Medium
CVE-2019-17106
Centreon Sensitive Data Exposure
High
CVE-2019-17104
Centreon Does Not Set HTTPOnly Flag
Critical
CVE-2018-21025
Centreon Privilege Escalation
Medium
CVE-2019-17205
TeamPass Stored Cross-site Scripting
Medium
CVE-2019-17204
TeamPass Stored Cross-site Scripting
Medium
CVE-2019-17203
TeamPass Stored Cross-site Scripting
High
CVE-2019-16993
phpBB Cross-Site Request Forgery (CSRF)
Medium
CVE-2019-16688
Dolibarr stored Cross-site Scripting in an Email Template section
Medium
CVE-2019-16687
Dolibarr Cross-site Scripting in a User Profile in a Signature section
Medium
CVE-2019-16686
Dolibarr Cross-site Scripting in a User Note section
Medium
CVE-2019-16685
Dolibarr stored Cross-site Scripting vulnerability
Medium
CVE-2019-13376
phpBB Cross-Site Request Forgery (CSRF)
Medium
CVE-2019-16738
MediaWiki information disclosure
Medium
CVE-2019-14272
SilverStripe asset-admin Cross-site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.