Medium
CVE-2014-100016
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Low
CVE-2014-1604
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.
Medium
0f6fa9c6-8a2b-49ca-ad7f-3aa51d671422
SEO Link Rotator <= 1.0 - Cross-Site Scripting
Unrated
168
iRecommend
Medium
CVE-2014-125090
Media Downloader <= 0.1.992 - Reflected Cross-Site Scripting
Medium
CVE-2014-1750
Nokia Maps & Places < 1.6.7 - Open Redirect
Medium
0db32d66-4def-4356-96d8-74ba49e7604a
Social Ring (Facebook Like, Google +1, ReTweet, LinkedIn and Pin It) <= 1.1.9 - Cross-Site Scripting
High
CVE-2012-6629
Newsletter Manager < 1.4 - Cross-Site Request Forgery
Medium
fe799030-ec9c-45fd-a5a9-6589364b6056
DT Chocolate (All Versions) - Cross-Site Scripting
High
eae1ee2c-1be5-4be5-8873-f99c8fdd41ba
lote27 (All Versions) - Arbitrary File Download
High
379408c3-399d-4aff-9a6b-43913aaa52b7
WP-Members Membership Plugin <= 2.8.9 - Reflected Cross-Site Scripting
Medium
CVE-2014-100026
April's Super Functions Pack <= 1.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2014-4563
Cloak & Encrypt < 3.8.0 - Cross-Site Scripting
Medium
CVE-2014-1232
Foliopress WYSIWYG < 2.6.8.5 - Cross-Site Scripting
Medium
13a1e293-f539-4d19-8fe8-392c126fd1c4
intouch <= 2.0 - Cross-Site Scripting
Medium
938e8f54-56f0-4066-bc78-ebfc2abe0743
Flash player widget <= 1.3 - Content Spoofing
High
CVE-2013-7240
Advanced Dewplayer < 1.3 - Directory Traversal
Medium
CVE-2013-6991
WP-Cron Dashboard < 1.1.6 - Cross-Site Scripting
High
CVE-2013-6992
AskApache Firefox Adsense <= 3.0 - Cross-Site Request Forgery
Medium
CVE-2013-7276
Recommend to a friend <= 2.2.2 - Cross-Site Scripting
High
62687f24-4be2-49de-9a7d-265325b0f72b
Dewplayer <= 1.2 and Advanced Dewplayer < 1.5 - Content Spoofing/Injection
Medium
d557ccb4-99c3-4286-91cd-87576a95f179
Repagent (Unknown Versions) - Cross-Site Scripting
Unrated
166
extplorer - 2.1.4 and below
High
CVE-2013-7233
WordPress Core < 2.1 - Cross-Site Request Forgery to Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.