High
CVE-2020-0848
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2020-0823
Out-of-bounds write in ChakraCore
High
CVE-2020-0825
Out-of-bounds write in ChakraCore
High
CVE-2020-0827
Out-of-bounds write in ChakraCore
High
CVE-2019-16405
Improper Input Validation in Centreon Web
Unrated
drupal-contrib-2021-024
drupal/pages_restriction - SA-CONTRIB-2021-024
High
CVE-2021-4225
SP Project & Document Manager <= 4.23 - Subscriber+ Arbitrary File Upload
High
CVE-2021-33813
XML External Entity (XXE) Injection in JDOM
Critical
CVE-2021-36879
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Privilege Escalation
Medium
CVE-2021-36878
uListing <= 2.0.5 - Cross-Site Request Forgery leading to Settings Change
Medium
CVE-2021-36877
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery
Medium
CVE-2021-36876
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery
Medium
CVE-2021-36875
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2021-24437
Favicon by RealFaviconGenerator <= 1.3.21 - Reflected Cross-Site Scripting
High
CVE-2021-24580
Side Menu Lite - add sticky fixed buttons < 2.2.6 - SQL Injection
High
CVE-2021-36874
uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR)
High
CVE-2021-24581
Blue Admin <= 21.06.01 - Cross-Site Request Forgery
Medium
CVE-2020-25025
Incorrect Authorization in TYPO3 extension
Medium
CVE-2020-12700
Missing Authorization in TYPO3 extension
Medium
CVE-2020-12698
Missing Authorization in TYPO3 extension
Medium
CVE-2021-23411
Cross-site scripting in anchorme
Critical
CVE-2021-23412
Command injection in gitlogplus
High
CVE-2020-11671
Missing Authorization in TeamPass
Critical
CVE-2020-13619
OS Command Injection in Locutus
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.