Unrated
drupal-contrib-2020-003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Critical
CVE-2017-12873
Incorrect persistent NameID generation in SimpleSAMLphp
Medium
CVE-2016-9955
Incorrect signature verification in SimpleSAMLphp
Low
ghsa-2r3v-q9x3-7g46
Link injection in SimpleSAMLphp
Low
CVE-2020-5226
Cross-site scripting in SimpleSAMLphp
Low
CVE-2020-5225
Log injection in SimpleSAMLphp
Unrated
drupal-contrib-2020-002
drupal/spamspan - SA-CONTRIB-2020-002
Critical
Exploited in attacks
CVE-2017-9841
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
Medium
CVE-2020-5223
Persistent XSS vulnerability in filename of attached file in PrivateBin
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-wqq8-mqj9-697f
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-f884-gm86-cg3q
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
High
CVE-2020-5244
BuddyPress <= 5.1.1 - Sensitive Information Disclosure
Unrated
drupal-core-2019-011
Drupal core - SA-CORE-2019-011
Unrated
drupal-core-2019-010
Drupal core - SA-CORE-2019-010
Unrated
drupal-core-2019-009
Drupal core - SA-CORE-2019-009
Medium
CVE-2019-19712
Information disclosure in the Contao backend
Medium
CVE-2019-16774
Object injection in cookie driver in phpfastcache
Unrated
drupal-contrib-2019-093
drupal/taxonomy_access_fix - SA-CONTRIB-2019-093
Unrated
drupal-contrib-2019-092
drupal/smart_trim - SA-CONTRIB-2019-092
Low
CVE-2019-16768
Internal exception message exposure for login action in Sylius
Critical
CVE-2019-18889
Symfony Unsafe Cache Serialization Could Enable RCE
High
CVE-2019-10764
Timing attacks might allow practical recovery of the long-term private key
Unrated
drupal-contrib-2019-089
drupal/commerce_ingenico - SA-CONTRIB-2019-089
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.