High
CVE-2017-1000170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,543
Medium
c320e437-c1b4-4ccf-9dfd-55ba9c810534
Download Monitor <= 1.9.6 - Missing Authorization
High
2238c9ba-6d00-4a21-a050-7b8a5f307964
WordPress Facebook <= 1.0.13 - SQL Injection
High
0e3034ae-957f-410d-80ef-4dc2b0e91ff5
Photo Gallery by 10Web <= 1.3.37 - Authenticated SQL Injection
Medium
3003bd3b-aee5-4bac-9a62-e747f544d2bd
Dave's WordPress Live Search <= 4.5 - Reflected Cross-Site Scripting
Unrated
465
Myportfolio - SQL Injection
Unrated
CVE-2017-8359
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.
Medium
CVE-2017-18559
cformsII <= 14.13.2 - Cross-Site Scripting
Critical
cc550fd9-c332-4a40-b4a9-166d5ffebc76
My Geo Posts Free <= 1.2 - PHP Object Injection
Critical
CVE-2017-18605
Gravitate QA Tracker <= 1.2.1 - Object Injection
Critical
4b40e33b-4aa8-4378-b044-a8a636d34f73
Referrer Detector <= 4.2.1.0 - PHP Object Injection
Critical
CVE-2017-18604
SiteBuilder Dynamic Components <= 1.0 - PHP Object Injection
Critical
17ccf3f5-ac71-4827-bf11-9a5199f8752e
AJAX Random Posts <= 0.3.3 - PHP Object Injection
Critical
fc6dcf93-7f1f-4e87-8ba5-852d23b1f0fd
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack
Critical
f4703ca7-0677-4128-b9b7-31132ff1804d
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - CSV Injection
High
CVE-2017-18607
Avada <= 5.1.4 - Cross-Site Request Forgery
Medium
CVE-2017-18606
Avada <= 5.1.4 - Stored Cross-Site Scripting
Critical
CVE-2017-1002016
flickr-picture-backup <= 0.7 - Arbitrary file upload
Medium
35293a82-b535-47a2-8a34-e54fe836ca89
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-10706
Jetpack <= 4.0.2 - Cross-Site Scripting
Critical
CVE-2016-6903
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Critical
CVE-2016-6902
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
High
CVE-2017-18570
cformsII <= 14.12.3 - Authenticated SQL Injection
Critical
CVE-2017-18592
WC Catalog Enquiry <= 3.0.5 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.