High
ghsa-9q64-mpxx-87fg
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2019-14862
XSS in knockout
High
CVE-2020-5391
Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery
Medium
CVE-2020-12077
MapPress Maps for WordPress <=2.53.8 - Authenticated Map Creation/Deletion to Stored Cross-Site Scripting & Remote Code Execution
High
CVE-2020-6753
Login by Auth0 <= 3.11.3 - Stored Cross-Site Scripting
Critical
CVE-2020-6009
LearnDash <= 3.1.5 - Unauthenticated SQL Injection
Critical
CVE-2020-7947
Login by Auth0 <= 3.11.3 - CSV Injection
Medium
CVE-2020-7948
Login by Auth0 <= 3.11.3 - Insecure Direct Object Reference
High
CVE-2019-14905
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
High
CVE-2019-15600
Cross-Site Scripting in http_server
Medium
CVE-2019-15596
Path Traversal in statics-server
High
CVE-2019-20149
Validation Bypass in kind-of
Critical
CVE-2020-6008
LifterLMS Wordpress Plugin <= 3.37.14 - Arbitrary File Write
Medium
CVE-2020-5392
Login by Auth0 Plugin <= 3.11.3 - Stored Cross-Site Scripting
Medium
CVE-2020-20634
Elementor Website Builder <= 2.9.5 - Authorization Bypass
Critical
CVE-2020-7611
Micronaut's HTTP client is vulnerable to HTTP Request Header Injection
Medium
CVE-2020-5284
Directory Traversal in Next.js
High
CVE-2020-5289
Read permissions not enforced for client provided filter expressions in Elide.
High
CVE-2020-5275
Firewall configured with unanimous strategy was not actually unanimous in Symfony
Medium
CVE-2020-5274
Exceptions displayed in non-debug configurations in Symfony
Low
CVE-2020-5255
Prevent cache poisoning via a Response Content-Type header in Symfony
High
CVE-2020-6817
regular expression denial-of-service (ReDoS) in Bleach
Medium
CVE-2020-36702
Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization
Medium
a7d0deb3-3d04-4f85-b769-0894d7c6ee7c
Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.