Medium
CVE-2018-19287
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
f2862cee-0412-42ba-9a8e-e5722bece775
Redirection <= 3.6.3 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2018-20368
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-5655
Weblizar Pin Feeds < 1.1.2 - Cross-Site Scripting
High
CVE-2018-5656
Weblizar Pin Feeds < 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2018-5312
WP Tabs – Responsive Tabs Plugin for WordPress <= 1.8.0 - Stored Cross-Site Scripting
High
CVE-2018-5310
Media from FTP Plugin < 9.85 - Directory Traversal
Medium
CVE-2018-5311
Easy Custom Auto Excerpt < 2.4.7 - Stored Cross-Site Scripting
High
CVE-2018-5669
Read and Understood < 2.2 - Cross-Site Request Forgery
High
CVE-2018-18920
Py-EVM is vulnerable to arbitrary bytecode injection
High
f53e5192-e809-400c-aed9-36b5d6415a9d
Orbit Fox by ThemeIsle <= 2.6.3 - Improper REST Capabilities Checks
High
bd302d8e-bba1-4fa1-bcbc-591d894ca1d6
Simple Link Directory <= 5.6.0 - PHP Object Injection
Critical
2f47a01d-b259-465e-bec1-9079987dc5a5
Kiwi Social Share <= 2.0.10 - Arbitrary Options Update
Critical
CVE-2017-18239
Exposure of Sensitive information in authentikat-jwt
High
CVE-2015-2080
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
Critical
CVE-2018-1337
Credential leak in org.apache.directory.api:apache-ldap-api
High
CVE-2017-16005
Header Forgery in http-signature
High
CVE-2017-16055
sqlserver is malware
Medium
CVE-2017-0931
Cross-Site Scripting in html-janitor
High
CVE-2017-16003
windows-build-tools downloads Resources over HTTP
Medium
CVE-2017-1000043
Content Injection via TileJSON Name in mapbox.js
High
CVE-2017-16006
XSS in Data URI in remarkable
High
CVE-2017-16014
Insufficient Error Handling in http-proxy
Medium
CVE-2017-1000042
Content Injection via TileJSON attribute in mapbox.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.