High
Exploited in attacks
CVE-2018-15811
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2018-15812
Insufficient Entropy in DotNetNuke
High
CVE-2018-18326
Insufficient Entropy in DotNetNuke
High
Exploited in attacks
CVE-2018-18325
Inadequate Encryption Strength in DotNetNuke
Critical
CVE-2019-9827
Server-Side Request Forgery in Hawt Hawtio
Medium
ghsa-4xcv-9jjx-gfj3
Denial of Service in mem
High
CVE-2019-9843
Improper Restriction of XML External Entity Reference in DiffPlug Spotless
Medium
CVE-2019-12384
Deserialization of Untrusted Data in FasterXML jackson-databind
High
ghsa-g8m7-qhv7-9h5x
Path Traversal in serve-here.js
Medium
ede6c4d1-e4bd-44c0-a66a-fffc0e1b22f6
Gallery Photoblocks <= 1.1.40 - Reflected Cross-Site Scripting
Medium
CVE-2019-13344
WP Like Button <= 1.6.0 - Missing Authorization
Medium
CVE-2019-14791
Appointment Booking Calendar < 1.3.19 - Cross-Site Scripting
High
f85a0394-cd70-419d-97bd-c75d6f721714
MyBookTable Bookstore <= 3.2.2 - Reflected Cross-Site Scripting
Medium
ed866cda-2244-4172-a8bd-63005bbee4fc
Feed Them Gallery <= 1.1.8 - Cross-Site Scripting
Critical
CVE-2019-15659
Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments < 3.1.2 - SQL Injection
High
CVE-2019-15832
Visitor Traffic Real Time Statistics <= 1.13 - Cross-Site Request Forgery
High
CVE-2019-16250
Ocean Extra <= 1.5.7 - Unauthenticated Options update and CSS injection
Medium
CVE-2019-15833
Simple Mail Address Encoder < 1.7 - Reflected Cross-Site Scripting
High
CVE-2019-15831
Visitor Traffic Real Time Statistics <= 1.12 - Cross-Site Request Forgery
Critical
CVE-2019-13177
Improper Verification of Cryptographic Signature in django-rest-registration
High
2edb574d-74b7-4f72-91a1-bb6632709b7a
WooCommerce <= 3.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-15648
Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal
High
162a194c-a7de-44c4-a659-8188e303b6a2
WooCommerce <= 3.6.4 - Missing File Type Validation
Medium
CVE-2019-12781
Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.