Critical
CVE-2014-100003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2014-8334
WP-DBManager < 2.72 - OS Command Injection
High
CVE-2014-8335
WP-DBManager < 2.72 - Command Injection
Medium
CVE-2014-8336
WP DB Manager < 2.7.2 - Arbitrary File Read
High
CVE-2014-9454
Simple Sticky Footer <= 1.3.2 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
1833720c-e714-4ec5-9ebb-24a4612195d6
Work The Flow <= 2.3.1 - Arbitrary File Upload
Medium
CVE-2014-7139
Contact Form DB <= 2.8.19 - Cross-Site Scripting
Medium
CVE-2014-6243
EWWW Image Optimizer <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2014-7138
Simple Calendar – Google Calendar Plugin < 2.0.4 - Reflected Cross-Site Scripting
Critical
CVE-2014-7297
Enfold < 3.0.1 - Unspecified Vulnerability
High
CVE-2014-7959
BulletProof Security < .51.1 - SQL Injection
Medium
CVE-2014-6444
Titan Framework <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2014-6445
Contact Form 7 Integrations 1.0 - 1.3.10 - Multiple Cross-Site scripting
Critical
CVE-2014-6446
Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload
Critical
CVE-2012-5310
WP eCommerce < 3.8.7.6 - SQL Injection
High
CVE-2014-7144
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (pas
Medium
CVE-2014-6604
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting
High
CVE-2014-5389
Content Audit <= 1.6.0 - Authenticated (Admin+) SQL Injection
Low
CVE-2014-6315
Photo Gallery by 10Web <= 1.1.30 - Reflected Cross-Site Scripting
Unrated
229
Akeeba CMS Update
High
CVE-2012-5507
Plone and Zope2 affected by Race Condition
High
CVE-2012-5503
Plone allows remote attackers to read hidden folder contents
High
CVE-2012-5489
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
High
CVE-2012-5486
HTTP header injection in Plone and Zope2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.