Medium
5caa9c7c-07b3-4288-803f-f60e5b428953
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2018-1002007
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
Medium
247f6b86-767b-479f-90d4-79345699dd59
MonsterInsights – Google Analytics Dashboard for WordPress <= 7.1 - Stored Cross-Site Scripting
High
CVE-2018-13863
js-bson vulnerable to REDoS
Critical
CVE-2018-16460
ps Enables OS Command Injection
Critical
CVE-2018-3786
Command Injection in egg-scripts
High
CVE-2017-16073
noderequest is malware
High
CVE-2018-16966
File Manager <= 3.0 - Cross-Site Request Forgery
Critical
CVE-2018-25105
File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download
Medium
CVE-2018-16967
File Manager <= 3.0 - Stored Cross-Site Scripting
Medium
c4d8f5a9-56e1-4676-b03f-1f5464c5b29a
Unyson <= 2.7.18 - Sensitive Information Exposure
Unrated
640
Magiczoomplus for Joomla - Insecure Folder Permissions
Unrated
639
Gantry package - Other
Medium
CVE-2018-14042
Bootstrap Cross-site Scripting vulnerability
Medium
CVE-2018-14041
Bootstrap Cross-site Scripting vulnerability
High
CVE-2018-1000523
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in I
Unrated
638
Forms by Balbooa.com - Information Disclosure
Medium
CVE-2018-16459
Cross-Site Scripting in exceljs
Critical
CVE-2018-1000620
Insufficient Entropy in cryptiles
High
ef888b2e-1fc7-442b-8b67-ebfdcbc76696
I Recommend This < 3.8.2 - Cross-Site Scripting
High
CVE-2018-3754
SQL Injection in query-mysql
Critical
CVE-2018-8319
Sensitive Data Exposure in msrcrypto
Critical
d7d6d15c-067f-44cb-bd61-ff39bed7e356
UserPro <= 4.9.27 - Privilege Escalation
Critical
CVE-2018-13797
Command Injection in macaddress
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.