Medium
CVE-2020-1758
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2020-1714
Improper Input Validation in Keycloak
High
CVE-2020-27782
Denial of service in Undertow
Medium
CVE-2020-1926
Apache Hive Information Exposure and Observable Timing Discrepancy
High
CVE-2019-17566
Server-side request forgery (SSRF) in Apache Batik
High
CVE-2020-11988
Server-side request forgery (SSRF) in Apache XmlGraphics Commons
Medium
CVE-2020-12668
Unauthorized access to Class instance in Jinjava
Medium
CVE-2020-9482
Insufficient Session Expiration in Apache NiFi Registry
Medium
CVE-2022-0508
Server-Side Request Forgery in @peertube/embed-api
Medium
CVE-2022-0506
Cross-site Scripting in microweber
Medium
CVE-2022-0505
Cross-Site Request Forgery in microweber
Medium
CVE-2022-0504
Generation of Error Message Containing Sensitive Information in microweber
Medium
CVE-2022-0509
Cross-site Scripting in pimcore
Critical
CVE-2022-23340
Joplin Vulnerable to Code Injection
Medium
CVE-2022-0510
Cross-site Scripting pimcore
Medium
CVE-2022-0533
Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2022-0535
E2Pdf <= 1.16.44 - Stored Cross-Site Scripting
High
CVE-2020-13935
Infinite Loop in Apache Tomcat
High
CVE-2020-13934
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
Medium
CVE-2021-41496
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative valu
High
CVE-2021-41495
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks
Medium
CVE-2022-22931
Path Traversal in Apache James Server
High
CVE-2021-4134
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
Medium
CVE-2022-2599
Anti-Malware Security and Brute-Force Firewall <= 4.21.74 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.