High
CVE-2017-16065
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2017-16072
nodemailer.js is malware
High
CVE-2017-16071
nodemailer-js is malware
High
CVE-2017-16070
nodecaffe is malware
High
CVE-2017-16069
nodeffmpeg is malware
Medium
CVE-2017-16109
Directory Traversal in easyquick
High
CVE-2017-16079
smb is malware
Medium
CVE-2017-16076
Hijacked Environment Variables in proxy.js
High
CVE-2017-16075
http-proxy.js is malware
High
CVE-2017-16074
crossenv is malware
High
CVE-2017-16115
Regular Expression Denial of Service in timespan
Unrated
drupal-contrib-2018-057
drupal/commerce - SA-CONTRIB-2018-057
Medium
CVE-2018-17140
Quizlord <= 2.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-17138
Jibu Pro <= 1.7 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2018-17207
Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution
Medium
6ab26526-9fbb-4c2e-be41-73450225b834
WooCommerce <= 3.4.4 - Authenticated PHP Object Injection
High
CVE-2018-14572
conference-scheduler-cli Arbitrary Code Execution
Medium
CVE-2017-16078
Shadowsock is malware
High
aa735320-f7fe-4e51-9f9a-f4c8f3ddc2e7
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting
Critical
CVE-2018-16159
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.1.8 - SQL Injection
Medium
CVE-2018-15876
Ajax BootModal Login <= 1.4.3 - CAPTCHA Reuse
High
CVE-2018-15877
Plainview Activity Monitor < 20180826 - Remote Command Injection
High
CVE-2018-15685
Electron webPreferences vulnerability can be used to perform remote code execution
High
CVE-2019-15092
Import Export WordPress Users and WooCommerce Customers <= 1.3.1 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.