Medium
CVE-2020-26275
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Low
ghsa-8pfh-mm2g-hmc3
Authenticated Server Side Request Forgery
Low
ghsa-cq6h-w3mc-57f4
Information exposure via query strings in URL
Low
ghsa-5q58-x5h2-v5rx
Authenticated Privilege Escalation
High
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
High
CVE-2020-26263
RSA weakness in tslite-ng
Medium
CVE-2020-26258
Server-Side Forgery Request can be activated unmarshalling with XStream
Medium
CVE-2020-26259
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
Medium
CVE-2020-26227
Cross-Site Scripting in Fluid view helpers
Medium
CVE-2020-7789
OS Command Injection in node-notifier
Medium
CVE-2021-24126
Envira Gallery Lite <= 1.8.3.2 - Cross-Site Scripting
Medium
CVE-2020-26870
Cross-site Scripting in dompurify
Unrated
CVE-2020-26280
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input valida
Medium
CVE-2020-35460
MPXJ path Traversal vulnerability
Medium
CVE-2020-35149
Code Injection in mquery
Critical
CVE-2020-28440
Command Injection in corenlp-js-interface
Medium
ac352bb2-f624-4c31-951a-988a0b420635
Simple Social Media Share Buttons <= 3.2.0 - Reflected Cross-Site Scripting
Critical
CVE-2020-7781
Command injection in connection-tester
High
CVE-2020-28458
datatables.net vulnerable to Prototype Pollution due to incomplete fix
High
CVE-2020-35489
Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass
Medium
CVE-2020-36723
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
Critical
CVE-2020-36719
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
Medium
724dead7-0e4a-420d-a5a3-fca578451211
Simple Social Media Share Buttons <= 3.1.1 - Reflected Cross-Site Scripting
High
CVE-2020-35943
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.