Medium
CVE-2019-10322
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2019-10321
Jenkins Artifactory Plugin cross-site request forgery vulnerability
High
CVE-2019-11832
TYPO3 Image Processing susceptible to Code Execution
Low
CVE-2019-11818
Alkacon OpenCMS XSS via New User module
Medium
CVE-2022-29172
Cross-site Scripting in Auth0 Lock
Medium
CVE-2021-20842
EC-CUBE Cross-site request forgery (CSRF) vulnerability
High
CVE-2021-43559
Moodle contains CSRF vulnerability
High
CVE-2021-44144
Croatia Control Asterix 2.8.1 (python_v0.7.2) has a heap-based buffer over-read, with additional details to be disclosed at a later date.
Medium
CVE-2021-43560
Moodle Insecure direct object reference (IDOR) in a calendar web service
High
CVE-2021-42250
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
Medium
CVE-2021-43576
XXE vulnerability in Jenkins pom2config Plugin
Medium
CVE-2021-21700
Stored XSS vulnerability in Jenkins Scriptler Plugin
Medium
CVE-2021-21701
XXE vulnerability in Jenkins Performance Plugin
Medium
CVE-2021-21699
Stored XSS vulnerability in Jenkins Active Choices Plugin
High
CVE-2021-43577
XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
High
CVE-2021-43578
Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
High
CVE-2021-41972
Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.
Critical
CVE-2021-33816
Dolibarr remote PHP code execution
Medium
CVE-2021-33618
Dolibarr ERP and CRM contain XSS Vulnerability
High
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
Critical
CVE-2021-21686
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21685
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21689
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21690
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.