High
CVE-2011-0696
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2011-0697
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file u
Critical
CVE-2011-0698
Directory traversal in Django
Critical
CVE-2011-5308
CDN Vote < 0.4.2 - SQL Injection
Medium
CVE-2011-0701
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure
High
CVE-2011-3818
WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure
Medium
CVE-2011-0740
RSS Feed Reader <= 0.1 - Cross-Site Scripting
Medium
CVE-2011-0641
StatPressCN <= 1.9.0 - Cross-Site Scripting
High
CVE-2010-4534
The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain objec
Medium
CVE-2010-4535
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp
Medium
CVE-2010-5296
WordPress Core < 3.0.2 - Missing Authorization
Medium
CVE-2010-4536
WordPress Core <= 3.0.3 - Cross-Site Scripting
High
CVE-2010-4277
Embedded Video <= 4.1 - Cross-Site Scripting
Medium
4bc58312-ef3d-487b-87fb-9a15a8c6559f
CformsII <= 14.10.1 - CAPTCHA Bypass
Medium
CVE-2010-4518
WP Safe Search <= 0.7 - Cross-Site Scripting
Medium
CVE-2010-4747
WordPress Processing Embed <= 0.5.1 - Cross-Site Scripting
Medium
CVE-2010-5106
WordPress Core < 3.0.3 - Access Control Bypass
High
CVE-2010-4825
Peadig's Twitter Feed: Embedded Timeline WordPress Plugin <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2010-4779
WPtouch < 1.9.20 - Cross-Site Scripting
Medium
CVE-2010-5295
WordPress Core < 3.0.2 - Cross-Site Scripting
High
CVE-2010-4257
WordPress Core <= 3.0.1 - SQL Injection
Medium
CVE-2010-5294
WordPress Core < 3.0.2 - Cross-Site Scripting
Medium
CVE-2010-5293
WordPress Core < 3.0.2 - Spam Protection Bypass
Medium
CVE-2010-4403
Register Plus <= 3.5.11 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.