Low
CVE-2025-25300
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2019-16289
Woody Ad Snippets <= 2.2.8 - Authenticated Cross-Site Scripting
Medium
CVE-2019-10753
Incorrect Resource Transfer Between Spheres in eclipse-wtp
Low
CVE-2019-5483
Sensitive Data Exposure in seneca
High
CVE-2019-5475
OS Command Injection in Nexus Yum Repository Plugin
High
CVE-2019-5479
Unintended Require in larvitbase-api
Medium
CVE-2010-2273
Cross-Site Scripting in dojo
Low
ghsa-5w65-6875-rhq8
Undefined Behavior in sailsjs-cacheman
High
ghsa-cgjv-rghq-qhgp
Path Traversal in algo-httpserv
Medium
CVE-2018-1002206
Directory Traversal in SharpCompress
Medium
CVE-2019-14936
Easy!Appointments <= 1.3.2 - Information Disclosure
High
33e010dd-d9b2-410c-8397-638def946fbe
Human Presence – Stop Form Spam Without ReCaptcha < 2.0.9 - Reflected Cross-Site Scripting
Unrated
689
PayPlans - ID
Unrated
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
Medium
CVE-2019-25315
Server Log Viewer <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2017-18610
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
High
CVE-2019-12516
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Medium
CVE-2017-18609
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via custom-write-panel-id Parameter
Medium
CVE-2017-18611
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter
Medium
CVE-2019-12517
SlickQuiz <= 1.3.7.1 - Stored Cross-Site Scripting
Medium
CVE-2019-16525
Checklist <= 1.1.8 - Cross-Site Scripting
Medium
2052278d-f1df-4a31-8688-11c7c8d20e07
Groundhogg <= 2.0.8.1 - Reflected Cross-Site Scripting
Critical
CVE-2019-25213
Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
Critical
CVE-2019-15896
LMS by LifterLMS <= 3.35.0 - Stored Cross-Site Scripting via Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.