Critical
CVE-2020-1911
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2020-24940
Guard bypass in Eloquent models affecting Laravel illuminate database component
Medium
CVE-2020-25102
silverstripe-advancedreports vulnerable to XSS
Medium
CVE-2020-23814
xxl-job Multiple cross-site scripting (XSS) vulnerabilities
High
CVE-2020-23811
xxl-job sensitive data exposure
High
CVE-2020-14209
Dolibarr Unrestricted Upload of File with Dangerous Type
Medium
CVE-2020-2250
Passwords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin
High
CVE-2020-2244
XSS vulnerability in Jenkins Build Failure Analyzer Plugin
Medium
CVE-2020-2251
Passwords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin
High
CVE-2020-2248
Reflected XSS vulnerability in Jenkins JSGames Plugin
High
CVE-2020-2247
XXE vulnerability in Jenkins Klocwork Analysis Plugin
High
CVE-2020-2243
Stored XSS vulnerability in Jenkins Cadence vManager Plugin
Medium
CVE-2020-2242
Missing permission checks in Jenkins Database Plugin
Medium
CVE-2020-2241
CSRF vulnerability in Jenkins Database Plugin
High
CVE-2020-2238
Stored XSS vulnerability in Jenkins Git Parameter Plugin
Low
CVE-2020-2249
Credentials stored in plain text by Jenkins tfs Plugin
Low
CVE-2020-2239
Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin
High
CVE-2020-2240
CSRF vulnerability in Jenkins Database Plugin
High
CVE-2020-2246
Stored XSS vulnerability in Jenkins Valgrind Plugin
High
CVE-2020-2245
XXE vulnerability in Jenkins Valgrind Plugin
Medium
CVE-2020-13828
Dolibarr stored Cross-Site Scripting (XSS) vulnerability
Critical
CVE-2020-24714
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.
Critical
CVE-2020-24715
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltNam
Medium
CVE-2020-24653
Expo on iOS is insecure due incorrect security attribute application
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.