Medium
CVE-2018-5382
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2018-1000195
Cross-Site Request Forgery in Jenkins
High
CVE-2018-1000194
Path Traversal in Jenkins
Critical
Exploited in attacks
CVE-2018-1000861
Deserialization of Untrusted Data in Jenkins
High
CVE-2018-1999001
Improper Input Validation in Jenkins
Medium
CVE-2018-1999003
Incorrect Authorization in Jenkins
Critical
Exploited in attacks
CVE-2019-1003029
Sandbox bypass in Script Security Plugin
High
CVE-2019-1003005
Sandbox Bypass in Script Security Plugin
High
CVE-2022-29885
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption
Critical
CVE-2022-1650
Exposure of Sensitive Information in eventsource
Medium
CVE-2022-1682
Cross-site Scripting in facturascripts
Medium
CVE-2022-22971
Allocation of Resources Without Limits or Throttling in Spring Framework
High
CVE-2022-22970
Denial of service in Spring Framework
High
CVE-2021-43307
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS)
Medium
CVE-2021-42648
Cross site scripting in code-server
Medium
CVE-2022-29923
Quick Restaurant Reservations <= 1.4.1 - Reflected Cross-Site Scripting
High
79a41b84-2e19-46eb-9f6b-5155da0b15cc
Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code
Medium
CVE-2022-45084
Loginizer <= 1.7.5 - Reflected Cross-Site Scripting via 'name'
Medium
CVE-2022-1569
WordPress Forms by Pie Forms <= 1.4.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1695
WP Simple Adsense Insertion <= 2.0 - Cross-Site Request Forgery
High
CVE-2022-1397
Privilege escalation in easyappointments
High
CVE-2022-1537
Race Condition in Grunt
Medium
CVE-2022-1005
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
Critical
CVE-2022-0788
WP Fundraising Donation and Crowdfunding Platform <= 1.4.2 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.