Medium
CVE-2022-29196
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Medium
CVE-2022-29195
Missing validation causes denial of service via `StagePeek`
Medium
CVE-2022-29194
Missing validation causes denial of service via `DeleteSessionTensor`
Medium
CVE-2022-29192
Missing validation crashes `QuantizeAndDequantizeV4Grad`
Medium
CVE-2022-29191
Missing validation causes denial of service via `GetSessionTensor`
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
Medium
CVE-2021-29049
Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter
Medium
CVE-2021-21662
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs
High
CVE-2021-20088
mootools-more vulnerable to prototype pollution
High
CVE-2020-1695
Improper Input Validation in RESTEasy
Critical
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability ex
Medium
CVE-2019-20366
XSS in Ignite Realtime Openfire via isTrustStore
Critical
CVE-2019-19899
Pebble Templates Improper Input Validation vulnerability
High
CVE-2019-19729
bson-objectid contains Improper input validation
Medium
CVE-2014-3599
HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference
High
CVE-2019-17598
Play Framework Inadequate Encryption Strength vulnerability
Critical
CVE-2019-8149
Magento Broken authentication and session managememt
High
CVE-2019-8154
Magento remote code execution vulnerability
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Medium
CVE-2019-16904
TeamPass Cross-site Scripting (XSS) vulnerability
Medium
CVE-2019-10430
Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
Medium
CVE-2019-10426
Jenkins Gem Publisher Plugin stores credentials as plaintext
High
CVE-2019-10428
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
Medium
CVE-2019-10407
Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.