Low
ghsa-mgv2-57vj-99xc
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2019-25214
ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting
Critical
CVE-2019-17206
Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts
High
CVE-2019-16865
DOS attack in Pillow when processing specially crafted image files
Critical
ghsa-6jg8-7333-554w
Sandbox Breakout in realms-shim
Unrated
drupal-contrib-2019-071
drupal/simple_amp - SA-CONTRIB-2019-071
Medium
CVE-2019-17239
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
High
ghsa-cxw4-9qv9-vx5h
High severity vulnerability that affects PeterO.Cbor
High
ghsa-v6cj-r88p-92rm
Buffer Overflow in centra
Critical
CVE-2017-14760
Event Espresso Free/Lite <= 3.1.37.12.L - Unauthenticated SQL Injection
High
98286172-99b0-43d6-9876-972e270aa19f
Theme Editor <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2019-16931
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting
Critical
CVE-2019-16932
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery
Critical
CVE-2019-10071
Timing attack on HMAC signature comparison in Apache Tapestry
High
CVE-2019-20360
GiveWP <= 2.5.4 - Authorization Bypass
Medium
CVE-2019-25314
Duplicate Post <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Unrated
drupal-contrib-2019-069
drupal/gutenberg - SA-CONTRIB-2019-069
Unrated
drupal-contrib-2019-068
drupal/permissions_by_term - SA-CONTRIB-2019-068
Medium
CVE-2019-16524
Easy Fancybox <= 1.8.17 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-25216
Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting
Medium
CVE-2019-25742
Zoner - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
High
3f0866a4-0edf-4fb7-8628-4b8e18a2b4bb
Simple Fields <= 1.4.11 - Cross-Site Scripting
Critical
CVE-2019-16335
Polymorphic Typing issue in FasterXML jackson-databind
Critical
CVE-2019-14540
Polymorphic Typing issue in FasterXML jackson-databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.