High
47fb0513-bebe-4e09-9402-d7e174ee92ce
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2014-1402
Incorrect Privilege Assignment in Jinja2
Unrated
197
EasyBlog pre
High
CVE-2014-3882
Login rebuilder < 1.2.0 - Cross-Site Request Forgery
Medium
CVE-2014-3842
iMember360is 3.8.012 - 3.9.001 - Cross-Site Scripting
Medium
7e0b9dd4-d882-4f56-9f6b-2f2955690a05
Bonuspressx (All Versions) - Cross-Site Scripting
Low
CVE-2014-0134
OpenStack Nova host data leak to vm instance in rescue mode
High
83460136-5a51-4c11-a695-ea2b2d60d68f
WP-Property – WordPress Powered Real Estate and Property Management < 1.38.4 - Information Disclosure
High
CVE-2015-9380
Photo Gallery by 10Web <= 1.2.41 - Cross-Site Request Forgery
Medium
310d9b83-6511-46be-aead-a0aa067d2c2f
Prostore < 1.1.3 - Open Redirect
Critical
c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763
Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass
Medium
CVE-2014-3843
Search Everything <= 8.1 - Cross-Site Request Forgery
Medium
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Medium
CVE-2013-7060
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
Medium
b6f7c956-16ce-4739-845b-15f426968808
WP Affiliate Platform <= 6.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2014-3845
TinyMCE Color Picker < 1.2 - Cross-Site Request Forgery
High
e8efc5cf-3497-4426-a8a5-740783a7c2c9
Acumbamail < 1.0.4.1 - Sensitive Information Disclosure
Medium
CVE-2014-3123
NextCellent Gallery < 1.9.18 - Stored Cross-Site Scripting
High
CVE-2014-3848
iMember360 < 3.9.001 - Missing Authorization and Sensitive Data Exposure
Medium
CVE-2014-3844
TinyMCE Color Picker <= 1.1 - Missing Authorization
Medium
CVE-2014-4537
Keyword Strategy Internal Links <= 2.0 - Reflected Cross-Site Scripting
High
CVE-2014-3849
iMember360 3.8.012 - 3.9.001 - Missing Authorization
Medium
CVE-2014-3841
Contact Bank – Contact Form Builder for WordPress <= 2.0.19 - Cross-Site Scripting
Medium
CVE-2014-4584
WP Easybooking <= 1.0.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.