Critical
CVE-2019-10760
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2019-17359
Out-of-Memory Error in Bouncy Castle Crypto
High
CVE-2020-20625
Sliced Invoices < 3.8.4 - Authenticated SQL Injection
Critical
CVE-2019-17195
Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT
Unrated
drupal-contrib-2019-074
drupal/bat - SA-CONTRIB-2019-074
Critical
CVE-2019-17626
XML Injection in ReportLab
Medium
CVE-2019-19983
Fast Velocity Minify <= 2.7.6 - Full Path Disclosure
Medium
CVE-2019-6011
wpDataTables Lite plugin <= 2.0.11 - Cross-Site Scripting
High
CVE-2019-6012
wpDataTables Lite plugin <= 2.0.11 - SQL injection
Medium
CVE-2019-16522
EU Cookie Law <= 3.1.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-16523
Events Manager <= 5.9.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-16520
All In One SEO Pack <= 3.2.6 - Stored Cross-Site Scripting
Unrated
691
J2Store - XSS (Cross Site Scripting)
High
CVE-2019-17592
Regular Expression Denial of Service in csv-parse
Critical
CVE-2019-17495
Cross-site scripting in Swagger-UI
Medium
CVE-2019-19306
Zoho CRM Lead Magnet <= 1.6.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2019-16521
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
Medium
CVE-2019-1000011
Incorrect Access Control vulnerability in api-platform/core
Medium
CVE-2019-16130
Cross-site Scripting in YII2-CMS
Critical
CVE-2019-17545
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
Medium
CVE-2019-17672
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-17670
WordPress Core < 5.2.4 - Server Side Request Forgery #2
Medium
CVE-2019-17669
WordPress Core < 5.2.4 - Server Side Request Forgery
Medium
CVE-2015-9508
Easy Digital Downloads – Commissions <= 3.1.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.