High
CVE-2019-16561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2019-16554
Missing permission check in Jenkins Build Failure Analyzer Plugin
High
CVE-2019-16560
Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
Medium
CVE-2019-16555
Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin
Medium
CVE-2019-16559
Jenkins WebSphere Deployer Plugin missing permission check
Medium
CVE-2019-16562
Jenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting
High
CVE-2019-16558
Improper Certificate Validation in Jenkins Spira Importer Plugin
Medium
CVE-2019-16552
Missing permission check in Jenkins Gerrit Trigger Plugin
High
CVE-2019-16551
Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
High
CVE-2019-16550
Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
High
CVE-2019-16549
Jenkins Maven Release Plug-in Plugin XXE vulnerability
High
CVE-2019-16553
Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin
Medium
CVE-2019-19709
Possible to circumvent title-blacklist
High
CVE-2019-19702
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service
High
CVE-2019-19687
OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforc
Critical
CVE-2019-19617
phpMyAdmin unsanitized Git information
Medium
CVE-2019-19596
GitBook allows Cross-site Scripting via a local .md file.
Critical
CVE-2019-14910
Keycloak Authentication Error
High
CVE-2019-14909
Keycloak Authentication Error
Medium
CVE-2019-19206
Dolibarr ERP and CRM contain XSS Vulnerability
High
CVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
High
CVE-2019-10174
Use of Externally-Controlled Input to Select Classes or Code in Infinispan
High
CVE-2019-19013
Pagekit File Upload vulnerability
High
CVE-2019-10206
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.