Medium
CVE-2019-19848
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filters
Critical
CVE-2019-8136
Magento 2 Community Edition Insecure Component
Medium
CVE-2019-8124
Magento 2 Community Edition Insufficient Logging
Medium
CVE-2019-8123
Magento 2 Community Edition Insufficient Logging
Critical
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Medium
CVE-2010-2958
phpMyAdmin Cross-site Scripting vulnerability
High
CVE-2010-3714
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
Low
CVE-2011-1940
phpMyAdmin Vulnerable to Cross-Site Scripting
Medium
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
High
CVE-2013-4321
TYPO3 vulnerable to remote authenticated arbitrary code execution
Medium
CVE-2013-4320
TYPO3 Improper Access Management in the File Abstraction Layer
High
CVE-2013-4250
TYPO3 doesn't properly check file extensions
Medium
CVE-2014-0129
Moodle allows attackers to modify the visibility of a badge
Medium
CVE-2015-2267
Moodle allows attackers to extract archives to arbitrary directories
Medium
CVE-2014-7838
Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module
Medium
CVE-2009-0816
Typo3 Backend XSS Vulnerability
Medium
CVE-2011-4901
Typo3 Arbitrary Information Disclosure
High
CVE-2022-23793
Path Traversal within joomla/archive tar class
High
CVE-2022-24739
Server-Side Request Forgery and Open Redirect in AllTube Download
Medium
CVE-2022-25769
Improper regex in htaccess file
High
CVE-2022-0666
CRLF Injection in microweber
Unrated
drupal-contrib-2022-015
drupal/exif - SA-CONTRIB-2022-015
Critical
CVE-2021-36567
Deserialization of Untrusted Data in topthink/framework
Critical
CVE-2021-43608
DBAL 3 SQL Injection Security Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.