Medium
CVE-2017-20056
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
37052cb9-8479-4004-9161-65f37028ae10
Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2017-20054
Contact Form Manager <= 1.4.3 - Cross-Site Scripting
High
CVE-2017-20090
Global Content Blocks <= 2.1.5 - Cross-Site Request Forgery
High
CVE-2017-18572
GNUCommerce < 1.4.2 - Stored Cross-Site Scripting
Medium
CVE-2017-20055
Contact Form Plugin <= 4.0.1 - Stored Cross-Site Scripting
Medium
CVE-2017-1000038
Relevanssi – A Better Search <= 3.5.7.1 - Stored Cross-Site Scripting
Critical
CVE-2017-6104
Wordpress Plugin Mobile App Native 3.0 <= 3.0 - Arbitrary File Upload
High
CVE-2017-18614
Kama Click Counter <= 3.4.9 - Blind SQL Injection
Medium
CVE-2017-18615
Kama Click Counter <= 3.4.9 - Cross-Site Scripting
Unrated
411
GPS Tools - SQL Injection
High
CVE-2017-18521
Democracy Poll <= 5.3.6 - Cross-Site Request Forgery
Medium
CVE-2017-18591
GD Rating System < 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-9910
Cross-site Scripting in html5lib
Medium
CVE-2016-9909
Improper Neutralization of Input During Web Page Generation in html5lib
Medium
CVE-2017-18520
Democracy Poll < 5.4 - Cross-Site Scripting
Unrated
407
JomWall - SQL Injection
Medium
CVE-2017-6103
AnyVar <= 0.1.1 - Cross-Site Scripting
Unrated
408
Joomloc-CAT - SQL injection
Critical
CVE-2015-1000001
Fast Image Adder < 1.2 - Arbitrary File Upload
Medium
CVE-2017-18582
Time Sheets < 1.5.2 - Cross-Site Scripting
High
CVE-2017-6577
Mail Masta <= 1.0 - SQL Injection via list_id parameter
High
CVE-2017-6572
Mail Masta <= 1.0 - SQL Injection via filter_list parameter
High
CVE-2017-6575
Mail Masta <= 1.0 - SQL Injection via member_id parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.