High
CVE-2019-16776
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2019-16775
Arbitrary File Write in npm
Medium
CVE-2019-20042
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-16780
WordPress Core < 5.3.1 - Stored Cross-Site Scripting via Block Editor
Medium
CVE-2019-20041
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-16781
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-16774
Object injection in cookie driver in phpfastcache
Critical
ee678085-ce74-4a35-9d90-3b94a3d39a8e
Ultimate Addons for Elementor < 1.20.1 - Authentication Bypass
Medium
CVE-2019-6029
Custom Body Class <= 0.6.0 - Cross-Site Scripting
Critical
CVE-2019-25763
Ultimate Addons for Beaver Builder <= 1.24.0 - Authentication Bypass
High
CVE-2019-6030
Custom Body Class <= 0.6.0 - Cross-Site Request Forgery
Unrated
drupal-contrib-2019-095
drupal/permissions_by_term - SA-CONTRIB-2019-095
Unrated
drupal-contrib-2019-094
drupal/modal_page - SA-CONTRIB-2019-094
Unrated
drupal-contrib-2019-093
drupal/taxonomy_access_fix - SA-CONTRIB-2019-093
Unrated
drupal-contrib-2019-092
drupal/smart_trim - SA-CONTRIB-2019-092
Critical
CVE-2019-10769
Sandbox Breakout / Arbitrary Code Execution in safer-eval
High
96288db4-2758-4562-8b26-0523926c9156
Rencontre – Dating Site <= 3.2.2 - Cross-Site Request Forgery
Critical
CVE-2013-2167
Insufficient Verification of Data Authenticity in python-keystoneclient
Critical
CVE-2013-2166
Inadequate Encryption Strength in python-keystoneclient
Medium
CVE-2019-19198
Scoutnet Kalender <= 1.1.0 - Cross-Site Scripting
Low
CVE-2019-16772
Cross-Site Scripting in serialize-to-js
Low
CVE-2019-16768
Internal exception message exposure for login action in Sylius
Medium
CVE-2019-16769
Cross-Site Scripting in serialize-javascript
Medium
CVE-2019-16771
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.