Unrated
462
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2017-1002015
Image Gallery with Slideshow <= 1.5.2 - SQL Injection via selectMulGallery
Critical
CVE-2017-1002013
Image Gallery with Slideshow Plugin <= 1.5.2 - Blind SQL Injection via imgid
Critical
CVE-2017-1002012
Image Gallery with Slideshow Plugin <= 1.5.2 - SQL Injection via gid
Medium
CVE-2017-1002011
Image Gallery with Slideshow Plugin <= 1.5.2 - Stored Cross-Site Scripting
Critical
CVE-2017-1002014
Image Gallery with Slideshow <= 1.5.2 - SQL Injection via gallery_name
High
174e6344-3919-4c73-8810-33de379ff463
LayerSlider <= 6.2.0 - Cross-Site Request Forgery
High
11aaec16-930d-44f6-abe5-4f7fdc32f252
LayerSlider <= 6.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2016-9243
Improper input validation in cryptography
High
CVE-2015-1000002
File Download <= 1.4 - Open Proxy
High
CVE-2016-10149
Pysaml2 does not sanitize XML responses
Medium
CVE-2017-5524
Plone Sandbox Escape
High
CVE-2017-7235
cfscrape Improper Input Validation vulnerability
Medium
CVE-2017-2127
YOP Poll <= 5.8.0 - Reflected Cross-Site Scripting
High
CVE-2017-18543
Invite Anyone < 1.3.16 - Email Injection
High
CVE-2017-18545
Invite Anyone <= 1.3.15 - Improper Input Validation
High
CVE-2017-18544
Invite Anyone < 1.3.16 - Cross-Site Request Forgery
Unrated
461
Membership Pro and other OS Solution extensions
Critical
CVE-2017-18571
Search Everything <= 8.1.6 - SQL Injection
Unrated
459
Directorix Directory Manager - SQL Injection
Unrated
460
OrdaSoft CCK - SQL Injection
Medium
CVE-2017-6955
Invite Anyone <= 1.3.14 - Change of Email Invitation Content
Critical
CVE-2017-1002009
Membership Simplified <= 1.58 - SQL Injection
High
CVE-2017-1002010
Membership Simplified <= 1.58 Beta - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.