High
CVE-2017-16079
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2017-16076
Hijacked Environment Variables in proxy.js
High
CVE-2017-16075
http-proxy.js is malware
High
CVE-2017-16074
crossenv is malware
High
CVE-2017-16115
Regular Expression Denial of Service in timespan
Unrated
drupal-contrib-2018-057
drupal/commerce - SA-CONTRIB-2018-057
Medium
CVE-2018-17140
Quizlord <= 2.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-17138
Jibu Pro <= 1.7 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2018-17207
Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution
Medium
6ab26526-9fbb-4c2e-be41-73450225b834
WooCommerce <= 3.4.4 - Authenticated PHP Object Injection
High
CVE-2018-14572
conference-scheduler-cli Arbitrary Code Execution
Medium
CVE-2017-16078
Shadowsock is malware
High
aa735320-f7fe-4e51-9f9a-f4c8f3ddc2e7
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting
Critical
CVE-2018-16159
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.1.8 - SQL Injection
Medium
CVE-2018-15876
Ajax BootModal Login <= 1.4.3 - CAPTCHA Reuse
High
CVE-2018-15877
Plainview Activity Monitor < 20180826 - Remote Command Injection
High
CVE-2018-15685
Electron webPreferences vulnerability can be used to perform remote code execution
High
CVE-2019-15092
Import Export WordPress Users and WooCommerce Customers <= 1.3.1 - CSV Injection
Critical
CVE-2018-3783
Privilege Escalation due to Blind NoSQL Injection in flintcms
Critical
CVE-2018-3785
Command Injection in git-dummy-commit
Critical
CVE-2018-3784
Code Injection in cryo
High
CVE-2018-1000656
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data
High
CVE-2011-2765
Pyro mishandles pid files in temporary directory locations and opening the pid file as root
High
CVE-2018-15560
PyCryptodome integer overflow vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.