Medium
CVE-2015-3154
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2020-7596
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
High
CVE-2020-7938
Plone Privilege Escallation
Medium
CVE-2020-7936
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirec
Medium
CVE-2020-7937
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
High
CVE-2020-7939
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
High
CVE-2020-7940
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
Medium
CVE-2020-7210
Umbraco CMS vulnerable to CSRF
High
CVE-2019-14888
Undertow vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2019-17361
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint
Medium
CVE-2020-5502
phpBB allows CSRF
Medium
CVE-2020-5501
phpBB Cross-Site Request Forgery (CSRF)
High
CVE-2020-2092
XXE vulnerability in Jenkins Robot Framework Plugin
Medium
CVE-2020-2095
Redgate SQL Change Automation Plugin stored credentials in plain text
Medium
CVE-2020-2094
Missing permission checks in Health Advisor by CloudBees Plugin
High
CVE-2020-2098
CSRF vulnerability in Jenkins Sounds Plugin allow OS command execution
High
CVE-2020-2097
Missing permission checks in Jenkins Sounds Plugin allow OS command execution
Medium
CVE-2020-2096
Reflected XSS vulnerability in Jenkins gitlab-hook Plugin
Medium
CVE-2020-2091
Missing permission checks in Jenkins Amazon EC2 Plugin
Medium
CVE-2020-2093
CSRF vulnerability in Health Advisor by CloudBees Plugin
Low
CVE-2020-2090
CSRF vulnerability in Jenkins Amazon EC2 Plugin
Medium
CVE-2020-0602
Denial of service in ASP.NET Core
High
CVE-2020-0603
Remote code execution in ASP.NET Core
High
CVE-2020-0606
Remote code execution in Microsoft.WindowsDesktop.App.Ref
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.