Critical
CVE-2018-1000620
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
ef888b2e-1fc7-442b-8b67-ebfdcbc76696
I Recommend This < 3.8.2 - Cross-Site Scripting
High
CVE-2018-3754
SQL Injection in query-mysql
Critical
CVE-2018-8319
Sensitive Data Exposure in msrcrypto
Critical
d7d6d15c-067f-44cb-bd61-ff39bed7e356
UserPro <= 4.9.27 - Privilege Escalation
Critical
CVE-2018-13797
Command Injection in macaddress
High
CVE-2018-3787
simplehttpserver allows directory traversal and file listing
Medium
CVE-2018-16330
Pandao editor.md vulnerable to XSS in IMG attributes
Medium
CVE-2018-16363
File Manager <= 2.9 - Reflected Cross-Site Scripting
Critical
CVE-2018-16613
wpForo < = 1.5.1 - Privilege Escalation
High
CVE-2018-1000773
WordPress Core < 5.0.1 - PHAR Unserialization
Unrated
drupal-contrib-2018-059
drupal/fraction - SA-CONTRIB-2018-059
Medium
CVE-2018-16516
Flask-Admin Cross-site Scripting vulnerability
Medium
CVE-2018-20979
Contact Form 7 <= 5.0.3 - Authorization Bypass
Medium
CVE-2018-16407
Moderate severity vulnerability that affects mayan-edms
Medium
CVE-2018-16406
Moderate severity vulnerability that affects mayan-edms
Medium
CVE-2018-16405
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.
High
cdac6080-5e23-488d-8b3c-de0c6c92e344
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
High
CVE-2018-11615
Mosca REDoS Vulnerability
Medium
CVE-2018-16285
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting
High
CVE-2017-16060
babelcli is malware
High
CVE-2017-16068
ffmepg is malware
High
CVE-2017-16067
node-opencv is malware
High
CVE-2017-16066
opencv.js is malware
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.