High
CVE-2018-15795
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
5193d1c0-5111-4e97-a433-a41a76acbde9
WooCommerce <= 3.5.1 - Authenticated Stored Cross-Site Scripting
Unrated
drupal-contrib-2018-074
drupal/bootstrap - SA-CONTRIB-2018-074
Critical
CVE-2018-21007
Woo Confirmation Email < 3.2.0 - Improper Access Control
Medium
a2e1948a-9513-43e4-aadd-369a7f4dc137
Ultimate Member <= 2.0.32 - Cross-Site Request Forgery
Critical
ghsa-mh6f-8j2x-4483
Critical severity vulnerability that affects event-stream and flatmap-stream
Medium
CVE-2018-19564
Easy Testimonials <= 3.5.2 - Stored Cross-Site Scripting
Unrated
648
music collection - SQL Injection
Critical
CVE-2018-20984
Patreon WordPress < 1.2.2 - PHP Object Injection
High
CVE-2018-19443
Session Fixation in Tryton
High
CVE-2018-11777
Improper Authentication in hive:hive-exec
Medium
CVE-2018-1314
Moderate severity vulnerability that affects org.apache.hive:hive-jdbc
Critical
CVE-2018-1282
SQL Injection in hive-jdbc
Low
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
Low
CVE-2018-1315
Incorrect Permission Assignment for Critical Resource in Apache hive
High
CVE-2015-7521
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Low
CVE-2014-0228
Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
High
CVE-2018-19183
Denial of Service in ethereumjs-vm
High
CVE-2018-17187
Improper Certificate Validation in proton-j
Medium
CVE-2018-19057
SimpleMDE XSS Vulnerability
Medium
CVE-2018-17574
Cross-site Scripting in yapi-vendor
Medium
CVE-2018-17960
Ckeditor XSS Vulnerability
Medium
CVE-2018-19289
Valine HTML Injection
Critical
CVE-2018-17190
Remote Code Execution in spark-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.