Medium
CVE-2020-28501
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2021-26275
Command injection in eslint-fixer
Medium
CVE-2021-28161
Improper Neutralization of Input in Theia console
Critical
CVE-2020-28360
Server-Side Request Forgery in private-ip
Critical
CVE-2020-27224
Cross-site Scripting (XSS) in Eclipse Theia
High
CVE-2019-17636
Insufficient Verification of Data Authenticity in Eclipse Theia
High
CVE-2019-10783
OS Command Injection in lsof
Critical
CVE-2019-10786
Improper Input Validation in network-manager
High
CVE-2019-10788
OS Command Injection in im-metadata
High
CVE-2019-10787
OS Command Injection in im-resize
High
CVE-2021-23360
Command Injection in killport
Critical
CVE-2020-7775
Improper neutralization of arguments in freediskspace
High
CVE-2021-27191
Denial of Service in get-ip-range
Critical
CVE-2021-26541
Command injection in gitlog
Critical
CVE-2020-28490
Command Injection in async-git
Critical
CVE-2020-7786
Command Injection in macfromip
High
CVE-2020-27543
Denial of Service (DoS) in restify-paginate
Medium
CVE-2021-20327
mongodb-client-encryption vulnerable to Improper Certificate Validation
Critical
CVE-2021-25913
Prototype Pollution in set-or-get
High
CVE-2021-21423
Rebuild-bot workflow may allow unauthorised repository modifications
Critical
ghsa-prmc-5v5w-c465
Client TLS credentials sent raw to server in npm package nats
High
CVE-2021-21388
Command Injection Vulnerability in systeminformation
High
CVE-2021-21421
ApiKey secret could be revelated on network issue
Medium
CVE-2021-21391
Regular expression Denial of Service in multiple packages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.