Critical
CVE-2017-1000194
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Medium
CVE-2017-1000193
October CMS XSS
Critical
CVE-2017-1000009
Akeneo PIM vulnerable to shell injection in the mass edition
Critical
CVE-2019-9194
elFinder command injection vulnerability in the PHP connector
Critical
CVE-2019-7743
Joomla! Object Injection Vulnerability
Medium
CVE-2019-6799
phpMyAdmin Arbitrary file read vulnerability
Medium
CVE-2019-3852
Moodle context freezing
Medium
CVE-2019-3851
Moodle Secure layout contained an insecure link in Boost theme
Critical
CVE-2019-11018
ThinkAdmin Administrator cookies still working after password change
Critical
CVE-2019-1000001
TeamPass Storing Passwords in a Recoverable Format vulnerability
High
CVE-2018-6010
Yii Framework reflected Cross-site Scripting
High
CVE-2018-3814
Craft CMS PHP Code Injection Vulnerability
Medium
CVE-2018-20028
Contao Information Disclosure via Access Control Flaws
High
CVE-2018-18942
RCE in baserCMS before 4.1.4
High
CVE-2018-17856
Joomla RCE Vulnerability
Critical
CVE-2018-16975
Elefant CMS PHP Code Execution Vulnerability
Medium
CVE-2018-16704
Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users
High
CVE-2018-14716
SEOmatic plugin for Craft CMS SSTI Vulnerability
High
CVE-2018-1133
Moodle calculated question type allows remote code execution by Question authors
High
CVE-2018-10092
Dolibarr arbitrary commands execution
High
CVE-2018-1000527
Froxlor PHP Object Injection vulnerability
Medium
CVE-2018-1081
Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script
High
CVE-2017-7615
MantisBT allows arbitrary password reset
High
CVE-2019-3849
Moodle Users could elevate their role when accessing the LTI tool on a provider site
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.