High
CVE-2017-6379
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Medium
CVE-2017-6973
MantisBT XSS via adm_config_report.php's action parameter
Medium
CVE-2017-7241
MantisBT XSS via move_attachments_page.php
Medium
CVE-2017-7309
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php
Medium
CVE-2017-11128
Bolt stored Cross-site Scripting (XSS)
Medium
CVE-2017-11127
Bolt CMS Stored XSS
Medium
CVE-2017-2642
Moodle User fullname disclosure on user preferences page
High
CVE-2017-1000067
MODX Revolution blind SQL injection
Medium
CVE-2017-11516
Yii Cross-site Scripting Framework vulnerability
High
CVE-2017-1000016
phpMyAdmin Cookie attribute injection attack
High
CVE-2017-11675
Authenticated RCE in Zen Cart 1.5.5e
High
CVE-2008-4793
Drupal Node Validation Bypass in the node module API
Medium
CVE-2008-5153
Moodle vulnerable to symlink attack
Medium
CVE-2008-5644
TYPO3 Cross-site Scripting vulnerability in the file backend module
Low
CVE-2008-5656
typo3/cms-felogin Cross-site Scripting vulnerability
Medium
CVE-2017-9516
Craft CMS XSS Vulnerability
Medium
CVE-2017-12062
MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php
Critical
CVE-2017-2641
Moodle SQL injection via user preferences
High
CVE-2017-6086
ViMbAdmin CSRF Vulnerabilities
Medium
CVE-2011-0451
EC-CUBE XSS Vulnerabilities
Medium
CVE-2011-0986
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
High
CVE-2010-4961
Webkit PDFs for TYPO3 has SQL Injection vulnerability
High
CVE-2010-4962
Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands
Low
CVE-2010-5097
TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.