Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Minion identity not validated in saltstack
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to b
Spider contacts
Magnitudo (All Versions) - Arbitrary File Upload
Responsive Zoom In/Out Slider WordPress Plugin (Unknown Versions) - Cross-Site Scripting
Anthology < 1.4.5 - Arbitrary File Upload
spider contact lite - sqli
Amoveo Multipurpose Wordpress Theme <= 2.0 - Arbitrary File Upload
Chameleon Theme < 3.9 - Arbitrary File Uploads
ThisWay <= 1.7.0 - Arbitrary File Upload
Switchblade - Powerful WordPress Theme <= 1.3.2 - Arbitrary File Upload
Floating Tweets <= 1.0.1 - Directory Traversal
Think Responsive <= 1.0 - Arbitrary File Upload
ColdFusion Responsive Fullscreen Video Image Audio Theme < 1.2 - Arbitrary File Upload
Right Now (Unknown Versions) - Arbitrary File Upload
wp-checkout (Unknown Versions) - Arbitrary File Upload
MoneyTheme (All Versions) - Arbitrary File Upload
Ghost (All Versions) - Arbitrary File Upload
Gallery Bank – WordPress Photo Gallery Plugin < 2.0.20 - Reflected Cross-Site Scripting
MoneyTheme (All Versions) - Cross-Site Scripting
Curvo Theme (All Known Versions) - Cross-Site Request Forgery and Arbitrary File Upload
MobileChief – Mobile Site Builder <= 1.5.7 - Cross-Site Scripting
SAICO <= 1.0.2 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.