High
aae57fed-1003-4b3a-8489-cfc85c250a04
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
6e54a627-7882-47de-ba36-1c34754bd64a
Houzez <= 1.8.3 - Reflected Cross-Site Scripting
Medium
a3ecc238-1f84-47fd-96b9-753d4b528c47
WooCommerce - Store Exporter <= 2.3.1 - CSV Injection
Medium
CVE-2019-10070
Stored XSS in Apache Atlas
High
CVE-2019-18857
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes
Medium
CVE-2019-10219
The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-wqq8-mqj9-697f
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
High
CVE-2020-6167
Minimal Coming Soon & Maintenance Mode <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes
High
CVE-2020-35135
Ultimate Category Excluder <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2020-6166
Minimal Coming Soon & Maintenance Mode <= 2.16 - Missing Authorization to Export Settings/Theme Change
High
ghsa-f884-gm86-cg3q
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
Medium
CVE-2016-1000236
cookie-signature Timing Attack
Critical
CVE-2019-17571
Deserialization of Untrusted Data in Log4j
Critical
CVE-2017-5645
Deserialization of Untrusted Data in Log4j
Medium
CVE-2019-20181
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.13 - Cross-Site Scripting via post_title
Medium
CVE-2020-7107
Ultimate FAQ <= 1.8.29 - Reflected Cross-Site Scripting
High
CVE-2019-19911
Uncontrolled Resource Consumption in Pillow
High
dc314c13-4be4-40fc-a035-5de0acb36c91
WP Simple Spreadsheet Fetcher for Google < 0.3.7 - Cross-Site Request Forgery
High
82ce66d0-dc53-4433-b499-30bfd48efaf2
Elegant Themes Divi 3.23 - 4.0.9, Divi Extra 2.23 - 4.0.9, Divi Builder 2.23 - 4.0.9 - PHP Code Injection
High
CVE-2020-5313
Out-of-bounds Read in Pillow
Critical
CVE-2020-5312
PCX P mode buffer overflow in Pillow
Critical
CVE-2020-5311
Buffer Copy without Checking Size of Input in Pillow
Critical
CVE-2020-5310
Integer overflow in Pillow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.