Medium
CVE-2017-18506
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Critical
74a26e81-c063-4590-abe8-6cac9ec62316
MarketPress <= 3.2.6 - Unauthenticated PHP Object Injection
Unrated
512
Bargain Product VM3 - SQL Injection
Medium
CVE-2017-18586
Insert Pages < 3.2.4 - Authenticated Directory Traversal
Unrated
513
Price Alert for Virtuemart - SQL Injection
Unrated
511
Keen IT Photo Contest - SQL Injection
Unrated
510
Quiz Deluxe - SQL Injection
High
CVE-2017-14844
WPGYM - Wordpress Gym Management System (Unknown Version) - SQL Injection
High
CVE-2017-14846
Mojoomla Hospital Management System for WordPress Theme < 22-05-2018 - SQL Injection
Medium
CVE-2017-18560
Content Audit <= 1.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2017-14507
Content Timeline <= 4.4.2 - SQL Injection
Medium
CVE-2017-14751
WP Jobs < 1.7 - Cross-Site Scripting
High
CVE-2017-14843
Mojoomla School Management System (Unspecified Version) - Authenticated (Student+) SQL Injection
High
CVE-2017-14845
WPCHURCH - Church Management System for Wordpress Theme < 13-07-2019 - SQL Injection
High
CVE-2017-14842
SMSmaster – Multipurpose SMS Gateway for Wordpress (All Versions) - Authenticated SQL Injection
High
CVE-2017-14847
WPAMS - Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection
Critical
CVE-2017-14125
Gallery – Image and Video Gallery with Thumbnails < 1.2.1 - SQL Injection
Medium
CVE-2015-4706
Improper Neutralization of Input During Web Page Generation in IPython
Critical
CVE-2017-14766
Student Result or Employee Database <= 1.6.3 - Authentication Bypass
Medium
CVE-2017-15079
Smush – Lazy Load Images, Optimize & Compress Images <= 2.7.5 - Directory Traversal
Medium
CVE-2015-4707
Improper Neutralization of Input During Web Page Generation in IPython
High
CVE-2015-5607
IPython vulnerable to cross site request forgery (CSRF)
Medium
CVE-2017-14622
2kb Amazon Affiliates Store < 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2017-14718
WordPress Core < 4.8.2 - Cross-Site Scripting via Javascript: and Data: URLs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.