Medium
274e5568-b600-4085-8406-9f9d5d4fc35a
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
CVE-2015-10143
Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Update
Unrated
265
Jdownloads Pre
Critical
2b24693f-6b69-4dfb-a18c-e929db09d020
Pagelines Theme < 1.4.6 - Missing Authorization
Unrated
264
J2Store - SQL Injection
Medium
CVE-2015-1366
Pixabay Images <= 2.3 - Cross-Site Scripting
High
CVE-2015-1376
Pixabay Images <= 2.3 - Arbitrary File Upload
Critical
CVE-2015-1375
Pixabay Images <= 2.0 - Authentication Bypass to Arbitrary File Upload
High
CVE-2015-1365
Pixabay Images <= 2.3 - Directory Traversal
Unrated
258
JEvents pre
Unrated
259
JCE - Joomla Content Editor
Critical
CVE-2015-1172
Holding Pattern <= 0.6 - Arbitrary File Upload
Medium
ea607a56-ed6e-44dd-be42-a0b0d970742e
Store Locator Plus < 4.2.27 - Email Injection
High
CVE-2014-8802
Pie Register <= 2.0.13 - Missing Authorization
Unrated
257
corephp paGo - LFI 1.0.7 and below
High
CVE-2015-10136
GI-Media Library < 3.0 - Directory Traversal
Unrated
252
EDVAS blank template pre
Medium
CVE-2014-9570
Simple Security <= 1.1.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2014-100027
Slimstat Analytics <= 3.5.5 - Stored Cross-Site Scripting
Critical
8b783b94-7135-49c1-aff2-1c2ea24bbfcd
CIP4 Folder Download Widget < 1.11 - Local File Inclusion
Critical
CVE-2015-1055
Photo Gallery by 10Web <= 1.2.7 - Unauthenticated Blind SQL Injection via order_by Parameter
Critical
CVE-2014-7957
Pods <= 2.4.3 - Multiple Cross-Site Request Forgery
Medium
CVE-2014-7956
Pods <= 2.4.3 - Cross-Site Scripting
Medium
239bdac1-c14b-42ff-bee5-130d0bf3394c
Custom Sidebars < 2.1.0.2 - Reflected Cross Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.