Unrated
drupal-contrib-2018-014
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filters
Unrated
drupal-core-2018-001
Drupal core - SA-CORE-2018-001
Unrated
drupal-contrib-2018-008
drupal/entity_ref_tab_formatter - SA-CONTRIB-2018-008
Medium
CVE-2018-5362
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[post_type][page]
Medium
CVE-2018-5367
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[post_type][post]
Medium
CVE-2018-5366
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[more_languages]
Medium
CVE-2018-5365
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting via wpglobus_option[selector_wp_list_pages][show_selector]
Medium
CVE-2018-5364
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[browser_redirect][redirect_by_language]
Medium
CVE-2018-5363
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[enabled_languages]
High
CVE-2018-5361
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Request Forgery
Unrated
drupal-contrib-2018-002
drupal/node_view_permissions - SA-CONTRIB-2018-002
Unrated
drupal-contrib-2018-001
drupal/stacks - SA-CONTRIB-2018-001
Unrated
drupal-contrib-2017-094
drupal/link_click_count - SA-CONTRIB-2017-094
Unrated
drupal-contrib-2017-091
drupal/config_update - SA-CONTRIB-2017-091
Unrated
drupal-contrib-2017-083
drupal/config_perms - SA-CONTRIB-2017-083
Unrated
drupal-contrib-2017-082
drupal/permissions_by_term - SA-CONTRIB-2017-082
Medium
CVE-2017-6954
BuddyPress Docs <= 1.9.2 - Authorization Bypass
Critical
CVE-2016-10045
Jomres
Medium
CVE-2016-4567
WordPress Core < 4.5.2 - Cross-Site Scripting via MediaElement.js
Critical
CVE-2014-8739
Creative Contact Form < 1.0.0 - Arbitrary File Upload
Medium
CVE-2014-2053
WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.