High
CVE-2020-24063
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
Exploited in attacks
CVE-2020-16017
Use after free in CefSharp
High
Exploited in attacks
CVE-2020-16013
Inappropriate implementation in V8 in CefSharp
Medium
CVE-2020-26245
Prototype Pollution in systeminformation
Medium
CVE-2020-29395
EventON <= 3.0.5 - Reflected Cross-Site Scripting
Medium
4bd169bc-1538-400f-b2cd-0bbcf1fea7ee
BuddyPress <= 6.3.0 - Insufficient Input Validation
Medium
CVE-2020-36670
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
High
CVE-2020-29128
XXE in petl
High
CVE-2020-28948
Drupal core - SA-CORE-2020-013
Critical
bec7d613-b1cd-4a4e-bbd9-62bca3a864a2
WPJobBoard <= 5.6.4 - SQL Injection
High
CVE-2021-24130
WP Google Map Plugin <= 4.1.4 - Authenticated SQL Injection via Orderby
Medium
414013e9-5baa-4f4f-bf67-f0e821ece807
WPJobBoard <= 5.6.4 - Reflected Cross-Site Scripting & Cross-Frame Scripting
Medium
CVE-2020-36171
Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads
Critical
CVE-2020-26238
Template injection in cron-utils
Low
ghsa-74hv-qjjq-h7g5
datasette-graphql leaks details of the schema of private database files
Medium
CVE-2020-26237
Prototype Pollution in highlight.js
Critical
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Medium
CVE-2020-26232
Open redirect in Jupyter Server
High
CVE-2020-26890
Denial of service attack due to invalid JSON
Critical
CVE-2021-24158
Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated Privilege Escalation
Low
CVE-2020-26229
XML External Entity in Dashboard Widget
High
CVE-2020-26228
Cleartext storage of session identifier
Low
CVE-2020-26231
Bypass of fix for CVE-2020-15247, Twig sandbox escape
Medium
CVE-2020-15247
Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.