Vulnerability DB

Detailed information and remediation guidance for known vulnerabilities.
Find out if you have vulnerabilities that put you at risk Test your code
Show:
Report a new vulnerability
Vulnerability Affects Type Published
  • H
SQL Injection 		sequelize >=4.0.0 <4.44.3,>=5.0.0 <5.15.1 npm 19 Aug, 2019
  • H
Arbitrary Code Injection 		addax <1.1.0 npm 16 Aug, 2019
  • H
Privilege Escalation 		microsoft.identitymodel.clients.activedirectory [,5.2.0) NuGet 15 Aug, 2019
  • H
Arbitrary Code Injection 		wxchangba * npm 14 Aug, 2019
  • M
Remote Code Execution (RCE) 		microsoft.chakracore [,1.111.2) NuGet 14 Aug, 2019
  • M
Denial of Service (DoS) 		io.netty:netty-codec-http2 [,4.1.39.Final) Maven 14 Aug, 2019
  • M
Denial of Service (DoS) 		io.netty:netty-codec-http2 [,4.1.39.Final) Maven 14 Aug, 2019
  • M
Denial of Service (DoS) 		io.netty:netty-codec-http2 [,4.1.39.Final) Maven 14 Aug, 2019
  • M
Denial of Service (DoS) 		io.netty:netty-codec-http2 [,4.1.39.Final) Maven 14 Aug, 2019
  • H
Directory Traversal 		twentytwenty.storage [2.11.0, 2.11.1) NuGet 13 Aug, 2019
  • H
Command Injection 		nokogiri <1.10.4 RubyGems 13 Aug, 2019
  • M
Information Exposure 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • M
Information Exposure 		magento/core <1.9.4.2 Composer 12 Aug, 2019
  • L
Session Fixation 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • L
Session Fixation 		magento/core <1.9.4.2 Composer 12 Aug, 2019
  • H
Security Bypass (PHP script injection) 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • M
Resource Injection 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • H
Information Exposure 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • M
Security Bypass (IDOR) 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • M
Inadequate Encryption Strength 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • M
Inadequate Encryption Strength 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • L
Inadequate Encryption Strength 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • H
Server-side Request Forgery (SSRF) 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • H
Server-side Request Forgery (SSRF) 		magento/core <1.9.4.2 Composer 12 Aug, 2019
  • H
Server-side Request Forgery (SSRF) 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • M
Denial of Service (DoS) 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • H
Remote Code Execution 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • H
Remote Code Execution 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019
  • H
Remote Code Execution 		magento/core <1.9.4.2 Composer 12 Aug, 2019
  • H
Remote Code Execution 		magento/community-edition >=2.1.0, <2.1.18,>=2.2.0, <2.2.9,>=2.3.0, <2.3.2 Composer 12 Aug, 2019