Medium
CVE-2019-10333
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2019-10339
Jenkins JX Resources Plugin missing permission check
Medium
CVE-2019-10338
Jenkins JX Resources Plugin cross-site request forgery vulnerability
Medium
CVE-2019-10334
Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
Medium
CVE-2019-10332
Jenkins ElectricFlow Plugin missing permission check
Medium
CVE-2019-10335
Jenkins ElectricFlow Plugin is vulnerable to stored cross site scripting vulnerability
Medium
CVE-2019-12616
phpMyAdmin CSRF Vulnerability
Critical
CVE-2019-11768
phpMyAdmin SQL injection in Designer feature
High
CVE-2019-12728
Incorrect Resource Transfer Between Spheres in Grails
Medium
CVE-2019-6588
Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API
Medium
CVE-2019-3895
An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitra
Medium
CVE-2019-11876
PrestaShop Cross-site Scripting vulnerability
Critical
CVE-2017-11365
Symfony Incorrect Access Control
Critical
CVE-2019-12277
Blogifier does not properly restrict APIs
Medium
CVE-2019-10320
Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin
High
CVE-2016-10750
Deserialization of Untrusted Data in Hazelcast
High
CVE-2019-0981
Denial of service in ASP.NET Core
High
CVE-2019-0982
Denial of service in ASP.NET Core
Medium
CVE-2019-12139
ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability
High
CVE-2019-0980
Denial of service in ASP.NET Core
Critical
CVE-2016-7043
Password in config file in KIE server
High
CVE-2019-11842
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
Medium
CVE-2019-0226
Apache Karaf vulnerable to relative path traversal
Critical
CVE-2019-11830
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.