Medium
CVE-2016-8642
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2016-5013
Moodle Does Not Escape Characters In Email Headers
Medium
CVE-2016-2190
Moodle sensitive information disclosure
Medium
CVE-2016-2151
Moodle allows attackers to discover student e-mail addresses
Medium
CVE-2016-0724
Moodle sensitive information disclosure
Medium
CVE-2016-2158
Moodle allows attackers to obtain sensitive category-detail information
Medium
CVE-2016-2156
Moodle provides calendar-event data without considering whether an activity is hidden
High
CVE-2015-6926
OXID eShop user impersonation vulnerability
High
CVE-2017-8874
Mautic Cross-Site Request Forgery (CSRF)
Critical
CVE-2018-9019
Dolibarr SQL Injection vulnerability
Medium
CVE-2017-14077
Securimage HTML Injection
Medium
CVE-2011-2674
BaserCMS privilege escallation
Medium
CVE-2017-7725
Concrete CMS vulnerable to cross-site scripting (XSS)
High
CVE-2022-1397
Privilege escalation in easyappointments
High
CVE-2022-1631
Incorrect Authorization in microweber
High
CVE-2022-29933
Improper account password reset in Craft CMS
High
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Medium
CVE-2022-1571
Cross-site Scripting in FacturaScripts
Medium
CVE-2022-1555
Microweber vulnerable to cross-site scripting (XSS)
Unrated
drupal-contrib-2022-036
drupal/image_field_caption - SA-CONTRIB-2022-036
Unrated
drupal-contrib-2022-035
drupal/dfp - SA-CONTRIB-2022-035
Medium
CVE-2022-21149
SCart is vulnerable to cross-site scripting (XSS)
High
CVE-2022-1544
Improper neutralization of formula elements in yii-helpers
Critical
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.