Critical
CVE-2020-28441
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2020-28438
deferred-exec Command Injection vulnerability
Critical
CVE-2020-28436
google-cloudstorage-commands Command Injection vulnerability
Critical
CVE-2020-28435
ffmpeg-sdk vulnerable to OS Command Injection
High
CVE-2020-28422
git-archive vulnerable to Command Injection via exports function
Critical
CVE-2021-23451
otp-generator before v3.0.0 insecurely generates random one-time passwords
Medium
CVE-2021-23397
@ianwalter/merge Prototype Pollution via `merge` function
Critical
CVE-2021-23373
set-deep-prop Prototype Pollution
Critical
CVE-2020-7678
node-import `params` argument can be controlled by users without any sanitization
Medium
CVE-2020-7649
snyk-broker Path Traversal before v4.73.0
Critical
CVE-2020-28462
ion-parser Prototype Pollution when malicious INI file submitted to application that parses with `parse`
Critical
CVE-2020-28461
js-ini Prorotype Pollution when malicious INI files submitted to an application that parses it with `parse`
Medium
CVE-2020-28455
markdown-it-toc Cross-site Scripting due to title of generated toc and contents of header not being escaped
Critical
CVE-2020-28447
xopen is vulnerable to OS Command Injection in Exported Function xopen(filepath)
Critical
CVE-2020-28446
ntesseract vulnerable to Command Injection
Critical
CVE-2020-28443
sonar-wrapper Command Injection vulnerability
Critical
CVE-2022-35131
Joplin is vulnerable to arbitrary code execution
Critical
CVE-2022-25759
convert-svg-core vulnerable to remote code injection
High
CVE-2022-36313
file-type vulnerable to Infinite Loop via malformed MKV file
High
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
High
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Low
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Medium
CVE-2022-31150
undici before v5.8.0 vulnerable to CRLF injection in request headers
Critical
CVE-2020-28471
Properties-Reader before v2.2.0 vulnerable to prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.