High
CVE-2008-4734
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2008-4107
WordPress Core < 2.6.2 - Cryptographic Weakness
High
CVE-2008-4106
WordPress Core < 2.6.2 - Arbitrary User Password Reset
Medium
CVE-2008-4671
WordPress MU < 2.6 - Cross-Site Scripting
Medium
CVE-2008-3747
WordPress Core < 2.6.1 - Cryptographic Weakness
Critical
CVE-2008-3362
Downloads Manager <= 0.2 - Arbitrary File Upload
High
CVE-2008-3233
WordPress Core < 2.6 - Cross-Site Scripting
Medium
CVE-2008-7321
TubePress < 1.6.5 - Cross-Site Scripting
Medium
CVE-2008-7175
NextGEN Gallery Plugin <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2008-2034
Download Monitor <= 2.0.6 - Unauthenticated SQL Injection
High
CVE-2008-2392
WordPress Core <= 2.5.1 - Arbitrary File Upload
Medium
CVE-2008-2068
WordPress Core <= 2.5 - Cross-Site Scripting
High
CVE-2008-4769
WordPress Core <= 2.3.3 - Directory Traversal
High
CVE-2008-1930
WordPress Core < 2.5.1 - Authentication Bypass
Critical
CVE-2008-1982
WordPress Spreadsheet <= 0.6 - Unauthenticated SQL Injection
Critical
CVE-2008-1646
WP-Download <= 1.2 - SQL Injection
High
CVE-2008-0164
Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arb
Critical
CVE-2008-1060
Sniplets < 1.2.3 - Remote Code Execution
Medium
CVE-2008-1061
Sniplets < 1.2.3 - Cross-Site Scripting
Critical
CVE-2008-0939
WP Photo Album Plus <= 1.1 - SQL Injection
Critical
CVE-2008-1059
Sniplets < 1.2.3 - Remote File Inclusion
Critical
CVE-2008-0845
WP People <= 3.4.1 - SQL Injection
Critical
CVE-2008-7040
Yellow Swordfish Simple Forum <= 1.11 - SQL Injection
Medium
CVE-2008-0837
Search Unleashed <= 0.2.10 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.