Medium
CVE-2020-7643
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 919
Reset filters
High
CVE-2020-7644
Uncontrolled Resource Consumption in fun-map
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
High
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Medium
CVE-2021-23419
Prototype Pollution in open-graph
Medium
CVE-2021-39171
Unlimited transforms allowed for signed nodes
High
CVE-2021-37694
Code injection issue for java-spring-cloud-stream-template
Medium
CVE-2021-3647
URIjs Vulnerable to Hostname spoofing via backslashes in URL
High
CVE-2021-21422
Cross-site scripting
High
CVE-2021-32702
Reflected XSS from the callback handler's error query parameter
High
CVE-2021-23395
Prototype Pollution in nedb
Medium
CVE-2020-7639
eivindfjeldstad-dot contains prototype pollution vulnerability
Critical
CVE-2020-7633
apiconnect-cli-plugins vulnerable to OS Command Injection
Medium
CVE-2020-8176
Cross-site scripting in @shopify/koa-shopify-auth
High
CVE-2020-7679
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs
Medium
CVE-2021-3163
Cross-site Scripting in quill
High
ghsa-4whq-r978-2x68
Arbitrary code execution in ExifTool
Medium
CVE-2019-10792
Injection in bodymen
Medium
CVE-2019-10805
Exposure of Resource to Wrong Sphere in valib
Medium
CVE-2021-20327
mongodb-client-encryption vulnerable to Improper Certificate Validation
High
CVE-2021-21384
Null characters not escaped
Medium
CVE-2021-21368
Prototype poisoning
High
CVE-2021-27516
URIjs Hostname spoofing via backslashes in URL
High
CVE-2021-21277
Angular Expressions - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.