Medium
CVE-2017-5934
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Unrated
645
CW Article Attachments (Free Version) - SQL Injection
Unrated
646
CW Article Attachments (Pro Version) - SQL Injection
Critical
CVE-2018-9206
Tajer <= 1.0.5 - Arbitrary File Upload
Unrated
644
kunena - Other
High
3e8a25d1-4bd8-4ecf-ac10-a333abaac328
Image Intense <= 3.2.5 - SQL Injection
Medium
CVE-2016-1000232
ReDoS via long string of semicolons in tough-cookie
High
CVE-2017-16077
mongose is malware
High
CVE-2017-16064
node-openssl is malware
Medium
CVE-2018-3747
Cross-Site Scripting in public
Critical
CVE-2018-3767
Denial of Service in memjs
High
CVE-2018-18074
Insufficiently Protected Credentials in Requests
High
CVE-2017-16013
Denial of Service via malformed accept-encoding header in hapi
Medium
CVE-2017-16028
Cryptographically Weak PRNG in randomatic
Critical
CVE-2018-3745
Out-of-bounds Read in atob
Critical
CVE-2018-3750
Prototype Pollution in deep-extend
High
CVE-2016-10540
Regular Expression Denial of Service in minimatch
High
CVE-2014-10064
Denial-of-Service Extended Event Loop Blocking in qs
Critical
CVE-2015-9235
Verification Bypass in jsonwebtoken
High
CVE-2016-10539
Regular Expression Denial of Service in negotiator
Medium
CVE-2018-3738
Denial of Service in protobufjs
Critical
CVE-2018-3752
Prototype Pollution in merge-options
Medium
CVE-2018-17583
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action
Medium
CVE-2018-17585
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via wpFastestCachePage options, wpFastestCachePreload_number or wpFastestCacheLanguage parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.