High
CVE-2018-16479
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2018-16492
Prototype Pollution in extend
High
CVE-2019-7560
Boolector use after free
Critical
CVE-2019-7548
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
Unrated
drupal-contrib-2019-014
drupal/acquia_connector - SA-CONTRIB-2019-014
Unrated
drupal-contrib-2019-013
drupal/login_alert - SA-CONTRIB-2019-013
Medium
CVE-2019-9568
Forminator Plugin <= 1.5.3.1 - SQL Injection
Medium
CVE-2019-9567
Forminator Plugin <= 1.5.4 - Cross-Site Scripting
Medium
CVE-2019-9909
GiveWP <= 2.3.0 - Cross-Site Scripting
Medium
CVE-2019-9911
NextScripts: Social Networks Auto-Poster <= 4.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2019-9913
WP Live Chat Support <= 8.0.17 - Cross-Site Scripting
Medium
CVE-2019-9912
WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting
Medium
CVE-2019-9914
YOP Poll <= 6.0.2 - Reflected Cross-Site Scripting via poll_id Parameter
Medium
CVE-2019-9646
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
Medium
CVE-2019-9910
KingComposer <= 2.8 - Reflected Cross-Site Scripting
High
CVE-2019-1000007
Depth counting error in guard() leading to multiple potential security issues in aioxmpp
Medium
CVE-2018-11760
Pyspark User Impersonation Vulnerability
Unrated
657
Easy Shop - Other
High
CVE-2019-15331
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
High
a67eb1fc-4762-4bdc-b0a0-c043c36659d0
NextGen Gallery <= 3.1.5 - PHP Object Injection
Medium
CVE-2019-7299
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
Medium
CVE-2019-7413
Parallax Scroll <= 2.0.1 - Cross-Site Scripting
High
CVE-2019-14793
Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter
High
CVE-2017-18361
Pylons Colander Denial of Service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.