Vulnerability index

Browse CVEs

36 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.3 CVE-2016-10038 Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/man… Modx Revolution after 2.5.1-pl Fix from $1,9502016-12-24 HIGH 7.3 CVE-2016-10039 Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/man… Modx Revolution 2.5.2+ Fix from $1,9502016-12-24 MEDIUM 5.0 CVE-2014-8775 MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote … Modx Revolution No fix yet Fix from $1,6002014-12-03 MEDIUM 6.8 CVE-2014-8773 MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CS… Modx Revolution No fix yet Fix from $1,6002014-12-03 HIGH 7.5 CVE-2014-2736 Multiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) session … Modx Revolution after 2.2.13 Fix from $1,9502014-04-24 HIGH 7.5 CVE-2014-2311 SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via un… Modx Revolution Mitigation only Fix from $1,9502014-03-11