Unrated
drupal-contrib-2019-094
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filters
Unrated
drupal-contrib-2019-093
drupal/taxonomy_access_fix - SA-CONTRIB-2019-093
Unrated
drupal-contrib-2019-092
drupal/smart_trim - SA-CONTRIB-2019-092
Low
CVE-2019-16768
Internal exception message exposure for login action in Sylius
High
CVE-2019-11458
Unsafe deserialization in SmtpTransport in CakePHP
Critical
CVE-2019-10913
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
Medium
CVE-2019-18886
User enumeration leak using switch user functionality in Symfony
High
CVE-2019-18888
Argument injection in a MimeTypeGuesser in Symfony
Critical
CVE-2019-18889
Symfony Unsafe Cache Serialization Could Enable RCE
Medium
CVE-2019-10763
Data leakage via SQL Injection in Pimcore
Critical
CVE-2019-10766
SQL Injection in usmanhalalit/pixie
High
CVE-2019-12331
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
High
CVE-2018-19277
XXE in PHPSpreadsheet due to encoding issue
High
CVE-2019-10764
Timing attacks might allow practical recovery of the long-term private key
High
CVE-2016-6485
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
Critical
CVE-2019-10910
Symfony Service IDs Allow Injection
Unrated
drupal-contrib-2019-089
drupal/commerce_ingenico - SA-CONTRIB-2019-089
Unrated
drupal-contrib-2019-088
drupal/sendinblue - SA-CONTRIB-2019-088
Unrated
drupal-contrib-2019-081
drupal/bugsnag - SA-CONTRIB-2019-081
Unrated
drupal-contrib-2019-078
drupal/nexus - SA-CONTRIB-2019-078
Low
CVE-2019-12617
SilverStripe Priviledge escalation through cache pollution
Medium
CVE-2019-12245
Lack of access control on upoaded files
Medium
CVE-2019-12203
Session fixation in change password form
Critical
CVE-2019-12204
Missing warning can lead to unauthenticated admin access in SilverStripe
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.