Medium
CVE-2016-9955
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filters
Low
ghsa-2r3v-q9x3-7g46
Link injection in SimpleSAMLphp
Low
CVE-2020-5226
Cross-site scripting in SimpleSAMLphp
Low
CVE-2020-5225
Log injection in SimpleSAMLphp
Unrated
drupal-contrib-2020-002
drupal/spamspan - SA-CONTRIB-2020-002
Medium
CVE-2020-29156
WooCommerce < 4.7.0 - Insecure Direct Object Reference via order_id Parameter
Critical
Exploited in attacks
CVE-2017-9841
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
Critical
CVE-2019-19576
Remote code execution in verot/class.upload.php
Critical
CVE-2019-18622
SQL injection in phpMyAdmin
Medium
CVE-2020-5223
Persistent XSS vulnerability in filename of attached file in PrivateBin
High
CVE-2019-18857
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-wqq8-mqj9-697f
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-f884-gm86-cg3q
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
High
CVE-2020-5244
BuddyPress <= 5.1.1 - Sensitive Information Disclosure
Unrated
drupal-core-2019-012
Drupal core - SA-CORE-2019-012
Unrated
drupal-core-2019-011
Drupal core - SA-CORE-2019-011
Unrated
drupal-core-2019-010
Drupal core - SA-CORE-2019-010
Unrated
drupal-core-2019-009
Drupal core - SA-CORE-2019-009
Medium
CVE-2019-19714
Insert tag injection in the Contao login module
Medium
CVE-2019-19712
Information disclosure in the Contao backend
High
CVE-2019-19745
Unrestricted file uploads in Contao
Medium
CVE-2019-16774
Object injection in cookie driver in phpfastcache
Unrated
drupal-contrib-2019-095
drupal/permissions_by_term - SA-CONTRIB-2019-095
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.