Low
ghsa-28fw-88hq-6jmm
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-16164
Vulnerability in RPKI manifest validation
Low
ghsa-6gv9-7q4g-pmvm
Persistent XSS in customer module in Shopware
Critical
CVE-2020-36849
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
High
ghsa-m9hw-7xfv-wqg7
Prototype Pollution in json-logic-js
High
CVE-2020-25658
Timing attacks in python-rsa
Critical
CVE-2020-27481
Good LMS <= 2.1.4 - Unauthenticated SQL Injection
High
CVE-2020-37277
Exploitable inventory component chaining in PocketMine-MP
Medium
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
High
CVE-2020-25074
MoinMoin vulnerable to remote code execution via cache action
Critical
Exploited in attacks
CVE-2020-13927
Authentication bypass in Apache Airflow
Critical
CVE-2020-36726
Ultimate Reviews < 2.1.33 - PHP Object Injection
Medium
CVE-2020-7764
Web Cache Poisoning in find-my-way
High
CVE-2020-7750
Cross-Site Scripting in scratch-svg-renderer
Critical
CVE-2020-36156
Ultimate Member <= 2.1.11 - Authenticated Privilege Escalation via Profile Update
Critical
CVE-2020-36155
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta
Critical
CVE-2020-36157
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles
Unrated
726
JomSocial - XSS (Cross Site Scripting)
Critical
562d0052-7f1a-441b-9ff7-1c8bcb4b74b4
Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection
Critical
CVE-2020-26214
LDAP authentication bypass with empty password
High
CVE-2020-7763
Arbitrary File Read in phantom-html-to-pdf
High
CVE-2020-27589
Improper Certificate Validation in blackduck
High
d0a311b7-5582-4581-bf4e-636d8a936ac6
WooCommerce Blocks <= 3.7.0 - Authorization Bypass
High
CVE-2020-28339
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.