Critical
ghsa-8mm3-2mcj-cx6r
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
ghsa-v86x-f47q-f7f4
Unauthorized File Access in atompm
Critical
ghsa-8qx4-r7fx-xc4v
Malicious Package in requst
Critical
ghsa-qv78-398w-cxp7
Malicious Package in shrugging-logging
High
ghsa-8mgg-5x65-m4m4
Command Injection in soletta-dev-app
Medium
CVE-2020-14332
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
Medium
CVE-2020-14330
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
Medium
7ff58a34-93ab-4e51-b857-fed1107631ea
Affiliates Manager <= 2.7.7 - Cross-Site Scripting
Medium
38d5d951-588f-4808-b691-5105021eb1e8
10WebSocial <= 1.1.26 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-1166
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing
High
CVE-2018-17145
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
Low
CVE-2020-15171
Users with SCRIPT right can execute arbitrary code in XWiki
Low
CVE-2020-15168
The `size` option isn't honored after following a redirect in node-fetch
Medium
CVE-2020-24660
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Medium
CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
Low
ghsa-rxq3-5249-8hgg
personnummer/python vulnerable to Improper Input Validation
Low
ghsa-qv8q-v995-72gr
personnummer/csharp vulnerable to Improper Input Validation
Low
ghsa-2p6g-gjp8-ggg9
personnummer/php vulnerable to Improper Input Validation
Critical
CVE-2019-10692
WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection
Medium
CVE-2020-5780
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Medium
387ab7c1-0ca2-41e0-b6a1-ed33e7b02cad
Love Travel 2.0 - 3.7 - Reflected Cross-Site Scripting
Medium
0f4aa403-5a8e-4e4d-a009-3f7bfdc7ada3
Love Travel 1.0 - 1.9 - Reflected Cross-Site Scripting and Cross-Frame Scripting
Medium
e10dd0e6-1567-437b-ace7-fae013d66514
Custom Dashboard & Login Page – AGCA <= 6.5.4 - Reflected Cross-Site Scripting
Medium
bc91449a-7013-430d-bf7c-70175ea45114
LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.