Medium
CVE-2017-5223
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2018-19296
Phar object injection in PHPMailer
High
CVE-2020-9402
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suit
Critical
CVE-2020-9457
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings Import to Privilege Escalation
Medium
ba98a282-39ee-4a84-b988-ecfc0c4cd297
Brizy - Page Builder < 1.0.114 - Missing Authorization to Settings Update
High
b71e6219-09cc-484e-8c48-536797d974ce
WordPress WP-Advanced-Search <= 3.3.3 - Unauthenticated Database Export
Medium
CVE-2020-9455
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Email Injection
Critical
8071f117-c341-45bc-8d6e-8aa5d677d65c
WordPress WP-Advanced-Search <= 3.3.3 - Remote Code Execution
Medium
CVE-2020-9458
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings and User Data Export
Critical
CVE-2020-9456
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Privilege Escalation
High
CVE-2020-9454
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Cross-Site Request Forgery to Settings Modification
Critical
CVE-2020-8840
Deserialization of Untrusted Data in jackson-databind
Critical
CVE-2019-20330
Deserialization of Untrusted Data in jackson-databind
High
CVE-2020-5251
Information disclosure in parse-server
Unrated
drupal-contrib-2020-005
drupal/svg_formatter - SA-CONTRIB-2020-005
Medium
CVE-2020-36841
WooCommerce Smart Coupons <= 4.6.0 - Unauthenticated Coupon Creation
Critical
CVE-2020-12073
Responsive Ready Sites Importer <= 2.2.6 - Unprotected AJAX Actions
High
CVE-2020-9372
Appointment Booking Calendar <= 1.3.34 - CSV Injection
Medium
CVE-2020-9371
Appointment Booking Calendar <= 1.3.34 - Stored Cross-Site Scripting
High
CVE-2020-1734
OS Command Injection in ansible
Medium
CVE-2020-6858
HTTP Response Splitting in Styx
High
9cd2ca03-e644-4bcd-b4b1-a547494fed7d
Booked <= 2.2.5 - Missing Authorization on AJAX Actions
Medium
CVE-2019-17569
Potential HTTP request smuggling in Apache Tomcat
Medium
CVE-2020-1935
Potential HTTP request smuggling in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.