High
c232b39c-7144-4d3a-9770-883986ca8b29
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2020-13642
Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2018-21233
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decode
Medium
CVE-2019-19110
wpForo Forum <= 1.6.5 - Cross-Site Scripting via s parameter
Medium
CVE-2019-19112
wpForo Forum <= 1.6.5 - Cross-Site Scripting via wpf-dw-td-value class
High
42b24b41-c520-4bb8-ba56-6f35500ee90e
FooGallery <= 1.9.24 - Authenticated Cross-Site Scripting
High
CVE-2019-19109
wpForo Forum <= 1.6.5 - Cross-Site Request Forgery
Medium
CVE-2019-19111
wpForo Forum <= 1.6.5 - Cross-Site Scripting via langid parameter
Medium
CVE-2020-8799
WTI Like Post <= 1.4.5 - Stored Cross-Site Scripting
Medium
CVE-2020-11037
Potential Observable Timing Discrepancy in Wagtail
High
CVE-2017-1000048
Prototype Pollution Protection Bypass in qs
Medium
CVE-2020-10691
Path Traversal in Ansible
Medium
Exploited in attacks
CVE-2020-11023
jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Medium
CVE-2020-11022
Potential XSS vulnerability in jQuery
Medium
CVE-2020-11021
Http request which redirect to another hostname do not strip authorization header in @actions/http-client
Medium
CVE-2020-11009
IDOR can reveal execution data and logs to unauthorized user in Rundeck
Medium
CVE-2020-11028
WordPress Core < 5.4.1 - Private Post Disclosure
Medium
CVE-2020-11025
WordPress Core < 5.4.1 - Authenticated Cross-Site Scripting via Customizer
Medium
CVE-2020-11029
WordPress Core < 5.4.1 - Reflected Cross Site Scripting
Medium
CVE-2020-11027
WordPress Core < 5.4.1 - Password Reset Link Non-Expiration
Medium
CVE-2020-11030
WordPress Core < 5.4.1 - Cross-Site Scripting in the Block Editor
Medium
CVE-2020-11026
WordPress Core < 5.4.1 - Authenticated (Author+) Cross-Site Scripting via File Uploads
Medium
CVE-2020-12462
Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
High
CVE-2020-12104
WordPress WP-Advanced-Search <= 3.3.6 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.