Medium
CVE-2020-4035
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,501
Reset filters
High
CVE-2020-11079
Command injection in node-dns-sync
Critical
CVE-2020-11059
Exposure of Sensitive Information to an Unauthorized Actor in AEgir
Medium
CVE-2020-7656
Cross-Site Scripting in jquery
Critical
CVE-2020-7646
curlrequest allows execution of arbitrary commands
Critical
CVE-2020-11072
False-negative validation results in MINT transactions with invalid baton
Critical
CVE-2020-11071
False-negative validation results in MINT transactions with invalid baton
Medium
CVE-2019-1010091
XSS in TinyMCE
Critical
CVE-2020-6836
Command Injection in hot-formula-parser
High
CVE-2017-1000048
Prototype Pollution Protection Bypass in qs
Medium
Exploited in attacks
CVE-2020-11023
jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Medium
CVE-2020-11022
Potential XSS vulnerability in jQuery
Medium
CVE-2020-11021
Http request which redirect to another hostname do not strip authorization header in @actions/http-client
Critical
CVE-2020-7614
Command Injection in npm-programmatic
High
CVE-2020-10800
Machine-In-The-Middle in lix
Medium
ghsa-pc5p-h8pf-mvwp
Machine-In-The-Middle in https-proxy-agent
High
CVE-2015-8851
Insecure Entropy Source - Math.random() in node-uuid
Medium
CVE-2016-1000237
Cross-Site Scripting in sanitize-html
Medium
CVE-2020-11003
CSRF and DNS Rebinding in Oasis
Critical
CVE-2019-10778
OS Command Injection in devcert-sanscache
High
CVE-2020-5263
Information disclosure through error object in auth0.js
Medium
CVE-2020-7638
confinit vulnerable to prototype pollution
Medium
CVE-2020-7637
Prototype pollution in class-transformer
High
ghsa-6chw-6frg-f759
Regular Expression Denial of Service in Acorn
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.