High
CVE-2019-19588
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2019-19507
Validation bypass is possible in Json Pattern Validator
Critical
CVE-2019-18818
Strapi allows unauthenticated attacker to reset admin password without valid reset token
High
CVE-2019-12421
Apache NiFi user log out issue
Medium
CVE-2019-10083
Apache NiFi process group information disclosure
Medium
CVE-2019-10080
Apache NiFi information disclosure by XXE
Medium
CVE-2019-18954
Pomelo allows external control of critical state data
Medium
CVE-2019-10771
Cross-Site Scripting in iobroker.web
Medium
CVE-2019-17632
Unescaped exception messages in error responses in Jetty
High
CVE-2019-11458
Unsafe deserialization in SmtpTransport in CakePHP
Critical
CVE-2019-10913
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
Medium
CVE-2019-18886
User enumeration leak using switch user functionality in Symfony
High
CVE-2019-18888
Argument injection in a MimeTypeGuesser in Symfony
Critical
CVE-2019-18889
Symfony Unsafe Cache Serialization Could Enable RCE
High
CVE-2019-10767
Arbitrary File Write in iobroker.js-controller
Medium
CVE-2019-10763
Data leakage via SQL Injection in Pimcore
High
CVE-2019-18841
Prototype Pollution in chartkick
High
CVE-2019-19118
Django allows unintended model editing
Medium
CVE-2019-19133
CSS Hero <= 4.0.3 - Reflected Cross-Site Scripting
High
CVE-2019-25142
Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update
Medium
CVE-2019-20141
Neon - Bootstrap Admin Theme <= 2.0 - Cross-Site Scripting
Medium
CVE-2019-20043
WordPress Core < 5.3.1 - Authorization Bypass
Medium
CVE-2019-16766
2FA bypass in Wagtail through new device path
Medium
CVE-2019-19541
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.