High
CVE-2013-2186
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2017-17897
Dolibarr SQL injection vulnerability in comm/multiprix.php
Critical
CVE-2017-17900
Dolibarr SQL injection vulnerability in fourn/index.php
Critical
CVE-2017-17899
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
High
CVE-2017-17898
Dolibarr sensitive information disclosure
Medium
CVE-2012-1209
Fork CMS XSS via Highlight Parameter
Medium
CVE-2017-1000442
Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar
Medium
CVE-2018-5215
Fork CMS XSS Vulnerability
Medium
CVE-2017-17971
Dolibarr ERP and CRM contain XSS Vulnerability
High
CVE-2017-1000419
phpBB Server-Side Request Forgery (SSRF)
Medium
CVE-2017-1000491
Shiba vulnerable to XSS leading to code execution
Medium
CVE-2017-1000467
Stored XSS in LavaLite 5.2.4
Medium
CVE-2017-1000482
Products.CMFPlone XSS in profile home_page property
Critical
CVE-2017-1000469
Cobbler vulnerable to arbitrary code execution
Medium
CVE-2017-1000495
QuickApps CMS Cross-site Scripting
High
CVE-2017-1000477
XXE Vulnerability in XMLBundle 0.1.7
Medium
CVE-2017-1000431
eZ Publish Cross-site Scripting (XSS) vulnerability
High
CVE-2011-4138
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for t
High
CVE-2011-4139
Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a cr
Critical
CVE-2012-0805
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select
Medium
CVE-2017-1000481
Products.CMFPlone Open Redirect Vulnerability
Medium
CVE-2017-15374
Shopware XSS Vulnerability
Medium
CVE-2014-3607
Improper Certificate Validation in vt-ldap
High
CVE-2017-11879
Open redirect in ASP.NET Core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.