High
CVE-2019-1010104
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2018-1000512
Tooltipy (tooltips for WP) <= 5.0 - Reflected Cross-Site Scripting
Critical
CVE-2017-16042
Growl before 1.10.0 vulnerable to Command Injection
Medium
CVE-2015-9236
Incorrect handling of CORS preflight request headers in hapi
High
CVE-2015-9240
Authentication Weakness in keystone
High
CVE-2015-9241
Denial of Service in hapi
High
CVE-2015-9242
Denial of Service in ecstatic
Critical
CVE-2016-10548
Arbitrary Code Injection in reduce-css-calc
Critical
CVE-2018-3746
Command Injection in pdfinfojs
High
CVE-2018-10363
Booking calendar, Appointment Booking System < 2.2.3 - Unauthenticated Parameter Manipulation
High
CVE-2018-11580
Mass Pages/Posts Creator <= 1.2.2 - Missing Authorization
Unrated
drupal-contrib-2018-040
drupal/entity_delete - SA-CONTRIB-2018-040
Unrated
drupal-contrib-2018-039
drupal/adtego_siteintel - SA-CONTRIB-2018-039
Unrated
drupal-contrib-2018-038
drupal/mollom - SA-CONTRIB-2018-038
Medium
CVE-2018-11633
Digital Goods < 2.2 - Cross-Site Request Forgery
Medium
CVE-2018-11709
wpForo Forum < 1.4.12 - Reflected Cross-Site Scripting
Medium
CVE-2018-11485
Advance Search for WooCommerce < 1.1 - Cross-Site Scripting
Medium
CVE-2018-11632
Add Social Share Buttons for Whatsapp and Viber < 1.1 - Cross-Site Request Forgery
Medium
CVE-2018-11486
Advance Search for WooCommerce <= 1.0.9 - Cross-Site Scripting
Medium
CVE-2018-11579
Woocommerce Category Banner Management <= 1.1.0 - Missing Authorization
Medium
CVE-2018-20982
Media Library Assistant <= 2.73 - Cross-Site Scripting
Medium
CVE-2018-0603
Site Reviews <= 2.15.2 - Cross-Site Scripting
High
CVE-2018-20974
JS Job Manager <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2018-0602
Email Subscribers & Newsletters <= 3.4.12 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.