High
2f3328c2-290f-410b-a6c8-2825d415f511
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-24123
PowerPress <= 8.3.7 - Arbitrary File Upload
High
CVE-2021-24377
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
Medium
CVE-2021-24378
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
Critical
CVE-2021-24376
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
High
CVE-2020-26149
Sensitive data exposure in NATS
Medium
ghsa-5822-pw57-vv37
XSS vulnerability when listing users on add & modify server pages.
Medium
CVE-2020-15241
Cross-Site Scripting in ternary conditional operator
Medium
CVE-2020-15242
Open Redirect in Next.js versions
Medium
CVE-2012-5784
Man-in-the-middle attack in Apache Axis
High
e3a8f554-7cb6-40b7-b83c-819e7785058a
HyperComments <= 1.2.2 - Arbitrary File Deletion
Medium
CVE-2020-28650
WPBakery Page Builder for WordPress <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
Low
CVE-2020-15215
Context isolation bypass in Electron
High
CVE-2020-15174
Unpreventable top-level navigation
High
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
High
9f9e5212-caed-46db-bbf2-81c4df88439f
LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection
High
CVE-2020-15170
Potential access control security issue in apollo-adminservice
Low
ghsa-f366-4rvv-95x2
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Medium
CVE-2020-6506
Android WebView Universal Cross-site Scripting
High
CVE-2020-15227
Potential Remote Code Execution vulnerability
High
CVE-2020-24807
File restriction bypass in socket.io-file
Critical
CVE-2020-26511
WPO365 | LOGIN <= 11.6 - Authentication Bypass
Low
CVE-2020-15228
Environment Variable Injection in GitHub Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.