Critical
CVE-2019-11886
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2019-10869
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
High
CVE-2019-0229
Apache Airflow vulnerable to CSRF Attacks
Medium
CVE-2019-0216
Apache Airflow vulnerable to Stored XSS
High
CVE-2019-10868
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field fo
High
CVE-2019-11869
Yuzo Related Posts <= 5.12.93 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2019-9844
Cross-Site Scripting in simple-markdown
Medium
CVE-2019-11002
Materialize-css vulnerable to Cross-site Scripting in tooltip component
Medium
CVE-2019-11003
Materialize-css vulnerable to Cross-site Scripting in autocomplete component
Medium
CVE-2019-11004
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
High
CVE-2019-0639
High severity vulnerability that affects Microsoft.ChakraCore
High
CVE-2019-0609
High severity vulnerability that affects Microsoft.ChakraCore
High
CVE-2019-0592
High severity vulnerability that affects Microsoft.ChakraCore
High
CVE-2019-0611
High severity vulnerability that affects Microsoft.ChakraCore
High
CVE-2019-0769
High severity vulnerability that affects Microsoft.ChakraCore
Medium
CVE-2019-0746
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2019-0773
High severity vulnerability that affects Microsoft.ChakraCore
High
CVE-2019-0771
High severity vulnerability that affects Microsoft.ChakraCore
Medium
CVE-2019-10864
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting
High
CVE-2019-0225
Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war
High
CVE-2019-1010260
High severity vulnerability that affects com.github.shyiko.ktlint:ktlint-core
High
CVE-2019-5423
Path Traversal in http-live-simulator
High
CVE-2019-5422
Cross-Site Scripting in buttle
High
CVE-2016-10745
Jinja2 sandbox escape vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.