Medium
CVE-2020-13676
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Critical
CVE-2020-13675
Drupal core - SA-CORE-2021-008
Medium
CVE-2020-13674
Drupal core - SA-CORE-2021-007
Unrated
CVE-2020-13673
Drupal core - SA-CORE-2021-006
High
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
High
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Medium
CVE-2021-32106
Cross-site scripting in ICEcoder
Medium
CVE-2021-31274
Cross-site Scripting in LibreNMS
Critical
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5
Medium
CVE-2021-32713
Cross-site scripting
Medium
CVE-2021-32712
Exposure of Sensitive Information to an Unauthorized Actor
Critical
CVE-2020-18155
SQL Injection in Subrion CMS
High
CVE-2020-15877
Exposure of Resource to Wrong Sphere in LibreNMS
Low
CVE-2019-14671
Improper Input Validation in Firefly III
High
CVE-2021-28931
Arbitrary file upload in Fork CMS
Medium
CVE-2020-23700
Cross-site scripting in LavaLite-CMS
High
ghsa-jpwx-ffjq-wr4w
Content object state fetch functions open to SQL injection
Critical
CVE-2021-38302
SQL injection in TYPO3 extension
Medium
CVE-2021-36793
CSRF token exposure in TYPO3 extension
High
CVE-2021-25956
Dolibarr vulnerable to Improper Authentication and Improper Access Control
High
CVE-2020-22345
OS Command Injection in Centreon
High
CVE-2021-38556
Command Injection in RaspAP 2.6.6
High
CVE-2021-38557
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
High
CVE-2021-25957
Weak Password Recovery Mechanism for Forgotten Password
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.