Low
CVE-2014-6315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,547
Unrated
229
Akeeba CMS Update
High
CVE-2012-5507
Plone and Zope2 affected by Race Condition
High
CVE-2012-5503
Plone allows remote attackers to read hidden folder contents
High
CVE-2012-5489
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
High
CVE-2012-5486
HTTP header injection in Plone and Zope2
Medium
CVE-2015-9230
BulletProof Security < .52.5 - Cross-Site Scripting
Critical
86eb42de-a820-4ba7-99cb-03d068e208a9
Category and Page Icons <= 0.9.1 - Arbitrary File Upload and Deletion
High
6e327239-b4f0-4d21-b25e-f015498981cb
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - SQL Injection
Medium
CVE-2014-5187
Tom M8te <= 1.5.3 - Directory Traversal
Medium
CVE-2014-9094
DZS Video Gallery < 7.95 - Multiple Cross-Site Scripting
Critical
7887e0a6-53bf-49c7-a7a6-7c65cec28cae
Refraction <= 1.3 - Multiple Vulnerabilities
Medium
582e2896-d800-4d73-8cef-8af76cba1ba8
DZS Video Gallery < 7.95 - Limited Local File Inclusion
Medium
CVE-2011-4955
bSuite <= 5 alpha 2 - Multiple Cross-Site Scripting
High
47938357-7d51-4d62-a08c-4b2bf3f3a062
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
High
CVE-2014-7152
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
High
CVE-2014-5324
Frontend File Manager Plugin < 3.6 - Arbitrary File Upload
Unrated
224
Hika Shop
Unrated
223
JDownloads
High
CVE-2014-125099
I Recommend This <= 3.7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2014-6242
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
Medium
CVE-2014-7181
MaxButtons < 1.26.1 - Reflected Cross-Site Scripting
Critical
CVE-2014-10376
I Recommend This < 3.7.3 - SQL Injection
Unrated
290
Joomla Mac Gallery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.