Medium
CVE-2020-17551
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-28088
Cross-site scripting (XSS)
High
CVE-2020-13949
Uncontrolled Resource Consumption in Apache Thrift
Medium
CVE-2021-20262
Keycloak Missing authentication for critical function
High
CVE-2021-23353
jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
Medium
CVE-2020-13959
Cross-site scripting (XSS) in Apache Velocity Tools
Medium
CVE-2021-3377
ansi_up cross-site scripting vulnerability
Medium
CVE-2021-24033
react-dev-utils OS Command Injection in function `getProcessForPort`
Medium
CVE-2021-46876
/user/sessions endpoint allows detecting valid accounts
High
ghsa-7vwg-39h8-8qp8
/user/sessions endpoint allows detecting valid accounts
Medium
CVE-2021-21364
Generated Code Contains Local Information Disclosure Vulnerability
Low
CVE-2021-21363
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
Medium
CVE-2021-24176
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-21371
Execution of untrusted code through config file
Low
CVE-2021-21265
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
Medium
CVE-2020-27223
DOS vulnerability for Quoted Quality CSV headers
High
CVE-2021-24174
Database Backups <= 1.2.2.6 - Cross-Site Request Forgery
Medium
CVE-2021-21295
Possible request smuggling in HTTP/2 due missing validation
Medium
CVE-2021-21360
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
High
CVE-2021-21361
Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin
Medium
CVE-2021-21337
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
High
CVE-2021-21336
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Medium
CVE-2020-28498
Elliptic Uses a Broken or Risky Cryptographic Algorithm
High
ghsa-qxx8-292g-2w66
Improper Authentication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.