Critical
CVE-2020-28278
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2020-35136
Dolibarr authenticated Remote Code Execution
Critical
CVE-2020-22083
** DISPUTED ** jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and cle
Medium
CVE-2020-10770
Keycloak vulnerable to Server-Side Request Forgery
Critical
CVE-2020-20136
QuantConnect Lean vulnerable to insecure deserialization
Medium
CVE-2020-7790
browsershot local file inclusion vulnerability
Low
CVE-2020-28838
OpenCart Cross-Site Request Forgery (CSRF)
Low
CVE-2020-8920
Information leak in Gerrit
High
CVE-2020-16971
Azure SDK for Java Security Feature Bypass Vulnerability
Medium
CVE-2020-27822
Wildfly has a memory leak vulnerability
Medium
CVE-2020-25631
Moodle Cross-site Scripting (XSS)
Medium
CVE-2020-25627
Moodle stored Cross-site Scripting (XSS)
High
CVE-2020-25630
Moodle Denial of Service
High
CVE-2020-25629
Moodle incorrect access control
Medium
CVE-2020-29565
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo
Medium
CVE-2020-27348
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plu
Medium
CVE-2020-25449
Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.
High
CVE-2020-5680
EC-CUBE Improper input validation vulnerability
Medium
CVE-2020-5679
EC-CUBE Improper Restriction of Rendered UI Layers or Frames
Critical
CVE-2020-28272
keyget vulnerable to prototype pollution
High
CVE-2020-2322
Missing permission checks in Jenkins Chaos Monkey Plugin
Critical
CVE-2020-2320
Jenkins Plugin Installation Manager Tool did not verify plugin downloads
High
CVE-2020-2324
XXE vulnerability in Jenkins CVS Plugin
Medium
CVE-2020-2323
Missing permission checks in Jenkins Chaos Monkey Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.