Critical
CVE-2019-25141
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2019-9574
WP Human Resource Management < 2.2.6 - Sensitive Information Disclosure
High
6fb2d9ec-1082-4209-9fc9-6f10ba3a2398
User Login History <= 1.7.0 - SQL Injection via OrderBy
High
2c25a344-4876-4ba8-bbc6-d1a32f4b1d08
User Login History <= 1.7.0 - SQL Injection via Order By
Critical
f6f91414-5035-4cab-81ad-18558fe43500
Better Search < 2.2.3 - SQL Injection
Medium
CVE-2018-1324
Apache Commons Compress vulnerable to denial of service due to infinite loop
Medium
CVE-2018-1334
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
Medium
CVE-2018-8024
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
High
CVE-2015-1772
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Medium
CVE-2017-12625
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2017-3164
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Critical
CVE-2019-0192
Critical severity vulnerability that affects org.apache.solr:solr-core
Medium
CVE-2019-3778
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Medium
CVE-2019-9658
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Medium
CVE-2019-9737
Cross-Site Scripting in editor.md
High
CVE-2019-15329
Import and export users and customers <= 1.14.0.2 - Cross-Site Request Forgery
Critical
CVE-2019-25217
SiteGround Optimizer <= 5.0.12 - Missing Authorization
Medium
CVE-2019-15328
Import and export users and customers <= 1.14.0.2 - Cross-Site Scripting
Critical
ce834ae1-e05a-4b0e-9d7f-144669437d70
Caldera Forms Pro < 1.8.2 - Missing Authorization
Critical
CVE-2019-9618
GraceMedia Media Player <= 1.0 - Local File Inclusion
High
CVE-2019-9710
Webargs mishandles concurrent JSON parsing
Critical
CVE-2018-12426
WP Live Chat Support Pro <= 8.0.06 - Remote Code Execution via unrestricted file upload
High
CVE-2019-25152
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.