Medium
CVE-2017-1000490
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2020-35124
XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
High
CVE-2021-21263
Query Binding Exploitation
Critical
6cc5f274-6e71-47a1-b4ec-9b3ba46fd7bf
123ContactForm for WordPress <= 1.5.6 - Validation Bypass via Plugin Verification
High
22f79a03-9195-4d5d-a189-9b5e1d3307c8
Contact Form 7 Database Addon <= 1.2.5.3 - SQL Injection
Medium
CVE-2020-28473
bottle HTTP Request smuggling
High
CVE-2021-24142
301 Redirects - Easy Redirect Manager < 2.51 - SQL Injection
Medium
CVE-2021-24124
WP Shieldon <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24339
Pods <= 2.7.26 - Authenticated Stored Cross-Site Scripting via Menu Label field
Medium
CVE-2021-24338
Pods 2.4.4.1 - 2.7.26 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-35748
FV Flowplayer Video Player <= 7.4.37.727 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2016-10886
WP Editor < 1.2.6 - Incorrect Permission Assignment or Protection
Medium
CVE-2021-24168
Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting
High
CVE-2017-12626
Denial of Service in Apache POI
Medium
CVE-2020-26253
Kirby .dev domains and some reverse proxy setups were treated as local
High
CVE-2021-3133
Elementor Contact Form DB <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2020-28042
Signature validation bypass in ServiceStack
Critical
CVE-2020-7741
XSS in hello.js
Critical
CVE-2020-7784
Command injection in ts-process-promises
Critical
CVE-2020-7794
Command injection in buns
High
CVE-2021-21252
Regular Expression Denial of Service in jquery-validation
Medium
CVE-2020-36191
Cross-Site Request Forgery in JupyterHub
Medium
CVE-2020-35655
Pillow Out-of-bounds Read
High
CVE-2020-35654
Pillow Out-of-bounds Write
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.