High
CVE-2014-1906
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2014-1889
BuddyPress <= 1.9.1 - Authorization Bypass
High
f8a653ab-7703-4e73-8089-a15ba6cf9718
Stop User Enumeration <= 1.2.4 - Security Bypass
Unrated
175
JomSocial component pre
Critical
d0fb6bf0-48b8-48cc-8080-8fe19c36ce7c
Dendelion < 2.6.6 - Arbitrary File Upload
Medium
CVE-2014-2040
Media File Renamer < 1.9.4 - Stored Cross-Site Scripting
Critical
339ab2b6-ca5e-41a8-ad32-9d2a271fb320
amerisale-re (All Versions) - Arbitrary File Upload
Medium
CVE-2014-100016
Photocrati <= 4.8.0 - Cross-Site Scripting
Low
CVE-2014-1604
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.
Medium
0f6fa9c6-8a2b-49ca-ad7f-3aa51d671422
SEO Link Rotator <= 1.0 - Cross-Site Scripting
Unrated
168
iRecommend
Medium
CVE-2014-125090
Media Downloader <= 0.1.992 - Reflected Cross-Site Scripting
Medium
CVE-2014-1750
Nokia Maps & Places < 1.6.7 - Open Redirect
Medium
0db32d66-4def-4356-96d8-74ba49e7604a
Social Ring (Facebook Like, Google +1, ReTweet, LinkedIn and Pin It) <= 1.1.9 - Cross-Site Scripting
High
CVE-2012-6629
Newsletter Manager < 1.4 - Cross-Site Request Forgery
Medium
fe799030-ec9c-45fd-a5a9-6589364b6056
DT Chocolate (All Versions) - Cross-Site Scripting
High
eae1ee2c-1be5-4be5-8873-f99c8fdd41ba
lote27 (All Versions) - Arbitrary File Download
High
379408c3-399d-4aff-9a6b-43913aaa52b7
WP-Members Membership Plugin <= 2.8.9 - Reflected Cross-Site Scripting
Medium
CVE-2014-100026
April's Super Functions Pack <= 1.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2014-4563
Cloak & Encrypt < 3.8.0 - Cross-Site Scripting
Medium
CVE-2014-1232
Foliopress WYSIWYG < 2.6.8.5 - Cross-Site Scripting
Medium
13a1e293-f539-4d19-8fe8-392c126fd1c4
intouch <= 2.0 - Cross-Site Scripting
Medium
938e8f54-56f0-4066-bc78-ebfc2abe0743
Flash player widget <= 1.3 - Content Spoofing
High
CVE-2013-7240
Advanced Dewplayer < 1.3 - Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.