Medium
CVE-2018-17586
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2018-17584
WP Fastest Cache <= 0.8.8.5 - Cross-Site Request Forgery via page to wpfastestcacheoptions
Unrated
641
JSN Framework System Plugin - 2.1.5
High
CVE-2018-1000809
privacyIDEA Improper Input Validation vulnerability
High
CVE-2018-1000808
Pyopenssl Incorrect Memory Management
High
CVE-2018-1000807
PyOpenSSL Use-After-Free vulnerability
High
CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
High
CVE-2018-18069
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2018-17866
Ultimate Member <= 2.0.27 - Multiple Cross-Site Scripting vulnerabilities
High
CVE-2016-9878
Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized
High
CVE-2016-9177
Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI
Medium
CVE-2018-18019
Slideshow Gallery <= 1.6.8 - Cross-Site Scripting
High
CVE-2018-18018
Slideshow Gallery <= 1.6.8 - SQL Injection
Medium
CVE-2018-18017
Slideshow Gallery <= 1.6.8 - Cross-Site Scripting
High
CVE-2017-16063
node-opensl is malware
Medium
CVE-2018-16984
Django allows unprivileged users to read the password hashes of arbitrary accounts
Medium
e7819dbf-fbcc-4dca-8300-b75ec096c541
Wordfence Security – Firewall & Malware Scan <= 7.1.13 - Reflected Cross-Site Scripting and Information Disclosure
High
CVE-2018-20972
Companion Auto Update <= 3.2.0 - Cross-Site Request Forgery
Medium
CVE-2018-3755
Cross-Site Scripting in sexstatic
Critical
CVE-2018-20973
Companion Auto Update <= 3.2.0 - Local File Inclusion
Medium
CVE-2018-3748
Cross-Site Scripting in glance
Medium
CVE-2019-17213
WebARX <= 1.3.0 - Stored Cross-Site Scripting
High
CVE-2019-17214
WebARX <= 1.3.0 - Firewall Bypass
Critical
CVE-2018-17573
Wp-Insert <= 2.4.2 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.