Medium
CVE-2020-10686
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2020-7645
chrome-launcher subject to OS Command Injection
Critical
Exploited in attacks
CVE-2020-11651
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access
High
CVE-2020-12479
TeamPass PHP arbitrary file include vulnerability
High
CVE-2020-12478
TeamPass files are available without authentication
High
Exploited in attacks
CVE-2020-11652
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods a
Medium
CVE-2020-12469
Subrion CMS PHP Object Injection
High
CVE-2020-12468
Subrion CMS CSV injection via Export Language
High
CVE-2020-1745
Improper Authorization in Undertoe
High
CVE-2020-1757
Improper Input Validation in Undertow
Medium
CVE-2020-11883
Diavante vue-storefront-api and storefront-api disclose stack trace
High
CVE-2020-2180
RCE vulnerability in Jenkins AWS SAM Plugin
Medium
CVE-2020-2177
Credentials stored in plain text by Jenkins Copr Plugin
High
CVE-2020-2178
XXE vulnerability in Jenkins Parasoft Findings Plugin
High
CVE-2020-2179
RCE vulnerability in Jenkins Yaml Axis Plugin
High
CVE-2020-11825
Dolibarr Cross-Site Request Forgery Vulnerability
Medium
CVE-2020-11823
Dolibarr stored Cross-site Scripting vulnerability
High
CVE-2020-9280
SilverStripe Folders migrated from 3.x may be unsafe to upload to
High
CVE-2020-0970
ChakraCore Remote Code Execution Vulnerability
High
CVE-2020-0969
ChakraCore RCE Vulnerability
High
CVE-2020-7613
Clamscan vulnerable to command injection
High
CVE-2020-2172
XXE vulnerability in Jenkins Code Coverage API Plugin
Medium
CVE-2020-2175
Stored XSS vulnerability in Jenkins FitNesse Plugin
Medium
CVE-2020-2176
XSS vulnerability in Jenkins useMango Runner Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.