Medium
CVE-2020-7598
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,501
Reset filters
High
CVE-2019-15603
Cross-Site Scripting in seeftl
High
CVE-2019-15602
Cross-Site Scripting in fileview
High
ghsa-9q64-mpxx-87fg
Open Redirect in ecstatic
Medium
CVE-2019-14862
XSS in knockout
High
CVE-2019-15600
Cross-Site Scripting in http_server
Medium
CVE-2019-15596
Path Traversal in statics-server
High
CVE-2019-20149
Validation Bypass in kind-of
Medium
CVE-2020-5284
Directory Traversal in Next.js
High
ghsa-vg44-fw64-cpjx
Incorrect Account Used for Signing
Low
CVE-2020-5259
Prototype Pollution in Dojox
High
CVE-2020-5258
Prototype pollution in dojo
High
ghsa-p94w-42g3-f7h4
Holder can (re)create authentic credentials after receiving a credential in vp-toolkit
High
ghsa-ff5x-w9wg-h275
Holder can generate proof of ownership for credentials it does not control in vp-toolkit
High
CVE-2020-5251
Information disclosure in parse-server
High
ghsa-9r27-994c-4xch
discord-html not escaping HTML code blocks when lacking a language identifier
Medium
CVE-2020-5243
Denial of Service in uap-core when processing crafted User-Agent strings
High
CVE-2020-7597
codecov NPM module allows remote attackers to execute arbitrary commands
High
CVE-2019-10790
TaffyDB can allow access to any data items in the DB
High
CVE-2019-10773
Yarn Improper link resolution before file access (Link Following)
Critical
CVE-2019-10777
OS command injection in aws-lambda
Critical
CVE-2019-10776
OS command injection in git-diff-apply
Critical
CVE-2019-15597
Command Injection in node-df
Medium
CVE-2019-14863
AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.