Medium
CVE-2017-17760
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
High
CVE-2017-12862
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
High
CVE-2017-12864
Integer Overflow or Wraparound in OpenCV
Medium
CVE-2018-5269
Reachable Assertion in OpenCV.
High
CVE-2017-12606
Out-of-bounds Write in OpenCV
High
CVE-2017-12598
Out-of-bounds Read in OpenCV
High
CVE-2017-12603
Out-of-bounds Write in OpenCV
High
CVE-2017-12599
Out-of-bounds Read in OpenCV
High
CVE-2017-12604
Out-of-bounds Write in OpenCV
High
CVE-2017-12601
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
High
CVE-2017-12605
Out-of-bounds Write in OpenCV
High
CVE-2017-12600
Denial of Service in OpenCV
High
CVE-2017-12602
Denial of Service in OpenCV
High
CVE-2017-12597
Out-of-bounds Write in OpenCV
Medium
CVE-2016-1517
Improper Input Validation in OpenCV
High
CVE-2016-1516
Double Free in OpenCV
High
CVE-2026-15070
Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter
High
CVE-2026-13430
Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import
Medium
CVE-2026-11818
WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API
Medium
CVE-2026-11392
WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parameters
Medium
CVE-2026-5069
Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'
Medium
ghsa-382c-vx95-w3p5
Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data
Medium
CVE-2026-53760
Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests
High
CVE-2026-56382
Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.