Critical
CVE-2017-16949
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2017-17719
WP Concours <= 1.1 - Cross-Site Scripting
Medium
CVE-2017-17753
CSV Import Export <= 1.1 - Cross-Site Scripting
Critical
CVE-2017-1001003
Arbitrary Code Execution in mathjs
Critical
CVE-2017-1001002
Arbitrary Code Execution in mathjs
Medium
CVE-2017-17780
Clockwork SMS Plugins - Multiple Versions - Cross-Site Scripting
Medium
CVE-2017-18015
Share This Image < 1.04 - Cross-Site Scripting
Medium
CVE-2018-5316
SagePay Server Gateway for WooCommerce < 1.0.9 - Cross-Site Scripting
Unrated
527
JEXTN Question And Answer - SQL Injection
Unrated
526
JEXTN Video Gallery - SQL Injection
Unrated
525
JBuildozer - SQL Injection
Medium
3c6fd92f-a541-42d1-8093-c3a4a61ab39b
Photo Gallery by 10Web <= 1.3.66 - Cross-Site Scripting
High
9b320755-1255-4331-8176-ee67d8d4873e
Top 10 – Popular posts plugin for WordPress <= 2.4.3 - SQL Injection
Unrated
CVE-2017-17555
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of servic
High
6fde9239-edac-4f85-be12-80825595a332
RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - SQL Injection
Medium
6f6883e4-3de6-4ca9-a26c-0b4f3bd5b70f
RegistrationMagic - Custom Registration Forms <= 3.7.9.4 - Reflected Cross-Site Scripting
Unrated
drupal-contrib-2017-091
drupal/config_update - SA-CONTRIB-2017-091
High
CVE-2017-16877
Next.js Directory Traversal Vulnerability
Medium
CVE-2017-17451
WP Mailster < 1.5.5 - Cross-Site Scripting
Medium
CVE-2017-18012
Z-URL Preview <= 1.6.2 - Cross-Site Scripting
Medium
CVE-2017-18010
Smart Marketing SMS and Newsletters Forms < 2.0.0 - Cross-Site Scripting
Medium
CVE-2018-20970
PDF & Print by BestWebSoft < 2.0.3 - Reflected Cross-Site Scripting
Critical
bba4f30f-fc21-4387-a29e-4e4a115d7c3c
Apocalypse Meow 21.1.3 - 21.2.7 - Authentication Bypass
Critical
CVE-2017-1000228
ejs is vulnerable to remote code execution due to weak input validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.