Medium
CVE-2018-18478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2018-18546
ThinkPHP SQLi Vulnerability
Critical
CVE-2016-5003
Apache XML-RPC vulnerable to Deserialization of Untrusted Data
High
CVE-2016-5002
Apache XML-RPC XXE Vulnerability
Medium
CVE-2013-2033
Jenkins vulnerable to Cross-site Scripting
Medium
CVE-2018-18548
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
Medium
CVE-2013-1939
SabreDAV Directory Traversal vulnerability
Medium
CVE-2013-2037
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X
Medium
CVE-2018-17782
MantisBT allows XSS via the Manage Filter page
Medium
CVE-2018-17783
MantisBT allows XSS via Edit Filter page
High
CVE-2012-0838
Apache Struts Code injection due to conversion error
Medium
CVE-2018-18943
XSS in baserCMS before 4.1.4
High
CVE-2018-11804
Improper Input Validation in Apache Spark
High
CVE-2018-17983
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
High
CVE-2018-19246
LFI in PHP-Proxy 5.1.0
Critical
CVE-2018-9209
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
Medium
CVE-2014-3681
Jenkins Cross-site Scripting vulnerability
High
CVE-2018-19458
Unauthenticated File Read in PHP Proxy
Medium
CVE-2018-19609
Showdoc Forced Browsing
Medium
CVE-2018-19621
Showdoc CSRF Vulnerability
Medium
CVE-2018-19785
XSS in PHP-Proxy-App through v3.0
High
CVE-2018-17605
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Medium
CVE-2018-17256
Umbraco CMS vulnerable to stored XSS
Medium
CVE-2018-19133
Flarum Core Leaks PII
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.