Medium
CVE-2018-7747
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2018-1000164
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
High
CVE-2018-1000159
tlslite-ng off-by-one error on mac checking
Unrated
drupal-contrib-2018-018
drupal/menu_export - SA-CONTRIB-2018-018
Medium
CVE-2018-9861
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
Critical
CVE-2017-0359
Diffoscope may write to arbitrary locations due to an untrusted archive
Medium
a60bb585-3c71-4381-8ba7-28ee63abdb14
Knews Multilingual Newsletters <= 1.1.0 - Reflected Cross-Site Scripting
Unrated
622
Convert Forms - CSV Injection
High
CVE-2018-0023
JSNAPy allows unprivileged local users to alter files under the directory
High
69fd1068-4bbd-4e8a-9d35-5e9a072c72e1
Relevanssi <= 3.6.0 - Authenticated (Admin+) SQL Injection
High
CVE-2018-9856
Kotti CSRF in the local roles implementation
High
CVE-2018-9035
Contact Form 7 to Database Extension 2.10.32 - CSV Injection
Medium
CVE-2018-9864
WP Live Chat Support <= 8.0.05 - Stored Cross-Site Scripting
Unrated
620
Gridbox com_gridbox - Multiple Vulnerabilities
Critical
CVE-2014-3539
Code injection in rope
Medium
CVE-2018-9844
WordPress File Upload <= 4.3.3 - Stored Cross-Site Scripting
High
CVE-2018-9118
WP Background Takeover < 4.1.5 - Directory Traversal
Unrated
619
Virtuemart - XSS
Critical
CVE-2018-1002150
Koji hub call does not perform correct access checks
Medium
a42dce68-0e64-46a6-926e-b676071744b9
My Calendar <= 2.5.16 - Authenticated Stored Cross-Site Scripting
Unrated
618
jDownloads - XSS (Cross Site Scripting)
Medium
CVE-2018-10100
WordPress Core < 4.9.5 - Open Redirect
Medium
CVE-2018-10102
WordPress Core < 4.9.5 - Authenticated Stored Cross-Site Scripting via Generator Tag
Medium
CVE-2018-10101
WordPress Core < 4.9.5 - Security Misconfiguration with URL Hostnames
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.