Medium
CVE-2019-10909
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2019-8233
Composer JavaScript injection possible via html comments
Medium
CVE-2019-8145
Magento Cross-Site Scripting via Attribute Set Name
Medium
CVE-2019-8133
Bypass of sitemp access restrictions
Critical
CVE-2019-8135
Remote code execution via vulnerable Symphony dependecy injection
High
CVE-2019-8121
Using JS libraries with known security vulnerabilities
Medium
CVE-2019-8126
Information disclosure through processing of external XML entities
Medium
CVE-2019-13236
XSS issues in the management interface
Medium
CVE-2019-13235
XSS in login form
Medium
CVE-2019-13237
Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms
Medium
CVE-2019-13234
XSS in search engine
High
CVE-2014-7143
Python Twisted trustRoot is not respected in HTTP client
High
CVE-2019-18874
Double Free in psutil
Medium
CVE-2019-17515
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.127.3 - Reflected Cross-Site Scripting
High
CVE-2019-14366
WP SlackSync <= 1.8.5 - Sensitive Information Disclosure
High
CVE-2019-14365
WP Intercom Slack <= 1.2.1 - Sensitive Information Disclosure
Medium
CVE-2019-17235
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Information Disclosure
High
CVE-2019-17237
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Cross-Site Request Forgery
High
CVE-2019-17234
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2019-17236
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Stored Cross-Site Scripting
Medium
86cb08ae-aa21-4ee6-baed-03429e4d38e2
MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting
High
CVE-2019-3465
Signature validation bypass in XmlSecLibs
Medium
CVE-2019-16403
Authorization Bypass Through User-Controlled Key in Bagisto
Medium
CVE-2019-16126
Cross-site Scripting in Grav
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.