Critical
CVE-2020-10817
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
e9b28209-498f-4319-be87-3f54c64d9ccd
CM Pop-Up banners <= 1.4.10 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-14010
Xenon - Bootstrap Admin Theme with AngularJS <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2020-11512
IMPress for IDX Broker <= 2.6.1 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-9514
IMPress for IDX Broker <= 2.6.1 - Authenticated Arbitrary Post Creation, Modification, and Deletion
Low
CVE-2020-37289
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Unrated
drupal-contrib-2020-008
drupal/svg_image - SA-CONTRIB-2020-008
Critical
CVE-2020-5280
Local file inclusion vulnerability in http4s
High
CVE-2020-5261
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
Critical
CVE-2020-11514
Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint
High
CVE-2020-11515
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
Unrated
694
acymailing - Other
Medium
CVE-2020-6816
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Medium
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
High
ghsa-vg44-fw64-cpjx
Incorrect Account Used for Signing
Medium
CVE-2020-10684
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
High
CVE-2020-12076
Data Tables Generator by Supsystic <= 1.9.91 - Cross-Site Request Forgery
Medium
CVE-2020-5252
Malicious package may avoid detection in python auditing
Medium
CVE-2020-36835
Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure
Medium
CVE-2020-12075
Data Tables Generator by Supsystic <= 1.9.91 - Missing Authorization on AJAX Actions
Low
693
BadBot Protection id 14294
Critical
CVE-2020-10799
SVGlib Vulnerable to XXE Attacks
Critical
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Medium
CVE-2023-23793
Read More Without Refresh <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.