Medium
983c603b-b9bb-4942-b554-345535886aea
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
4f23bec2-6079-41f6-99c1-80b0b47797ce
Facebook Page Photo Gallery <= 2.0.9 - Cross-Site Scripting
Medium
CVE-2014-1839
Creation of Temporary File With Insecure Permissions in logilab-commons
High
CVE-2014-1838
Improper Link Resolution Before File Access in logilab-commons
Unrated
191
plg_highlight_button - 1.5 and previious sqli
Unrated
190
plg_highlight_content - 1.5 and previous
Unrated
284
Codels codehighlighter
Unrated
283
plg_codehighlight - xss
Critical
c274a9b2-c95e-4898-afa4-d6e2f6006f91
Premium Gallery Manager (Unknown Versions) - Arbitrary File Upload
Critical
CVE-2014-3937
Contextual Related Posts < 1.8.10.2 - SQL Injection
Critical
d84ad258-8a0c-44b2-9897-03ad214e8493
Barclaycart (All Versions) - Arbitrary File Upload
Medium
860ce27b-749d-497f-9038-7e035cb3fe1d
Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites <= 4.3 - Cross-Site Scripting
Critical
CVE-2014-10017
Welcart e-Commerce <= 2.9.1 - SQL Injection
Medium
CVE-2014-10016
Welcart e-Commerce <= 1.3.12 - Cross-Site Scripting
Critical
bb979c91-6795-4365-a61b-2cf67a9c8223
thecotton <= 1.14 - Arbitrary File Upload
High
66f71de2-055d-42f0-9eb1-145c64f44d5b
Google Analytics MU < 2.4 - Cross-Site Request Forgery
Unrated
189
ActiveHelper LiveHelp - sqli
Critical
3a325371-e531-4cd9-bc39-d1b8f40a728f
Sixtees (All Versions) - Arbitrary File Upload
Unrated
184
Google Maps plugin for Joomla
Critical
CVE-2014-1905
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.27.4 - Arbitrary File Upload
Critical
CVE-2014-1907
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Arbitrary File Read/Deletion
High
97677968-9231-4a6b-ad81-ddb9eb9791dd
Activity Log Plugin < 2.0.4 - Fulle Path Disclosure
Medium
CVE-2014-1908
Broadcast Live Video – Live Streaming < 4.29.5 - Full Path Disclosure
Unrated
183
JJ Shoutbox
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.