High
CVE-2020-2321
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2017-15682
Cross site scripting in Crafter CMS
High
CVE-2017-15683
XML injection in Crafter CMS
Medium
CVE-2017-15680
Missing Authorization in Crafter CMS
High
CVE-2020-28975
** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model S
High
CVE-2020-23489
AVideo vulnerable to Improper Privilege Management
Medium
CVE-2020-28364
A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.
High
CVE-2020-28267
Prototype pollution in @strikeentco/set
Medium
CVE-2020-27193
Improper Neutralization of Input During Web Page Generation in CKEditor4
Critical
CVE-2020-24407
Magento 2 Community Edition RCE via Unsafe File Upload
Medium
CVE-2020-24405
Magento incorrect permissions vulnerability in the Inventory module
Low
CVE-2020-24406
Magento information disclosure vulnerability
Medium
CVE-2020-24401
Magento 2 Community Edition Incorrect Authorization
Low
CVE-2020-24403
Magento incorrect user permissions vulnerability within the Inventory component
Medium
CVE-2020-24402
Magento incorrect permissions vulnerability in the Integrations component
High
CVE-2020-24400
Magento SQL Injection vulnerability
Low
CVE-2020-24404
Magento 2 Community Edition vulnerable to Improper Authorization
Medium
CVE-2020-23136
Microweber Insufficient Session Expiry
High
CVE-2019-7357
Subrion CMS CSRF Vulnerability
Critical
Exploited in attacks
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
Critical
CVE-2020-25592
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
Medium
CVE-2020-17490
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
Medium
CVE-2020-2317
Stored XSS vulnerability in Jenkins FindBugs Plugin
Low
CVE-2020-2319
Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.