Medium
CVE-2020-5809
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2020-35849
MantisBT Incorrect Authorization for bug_revision_view_page.php check
Medium
CVE-2020-28413
MantisBT SQL Injection via mc_project_get_users function
Medium
CVE-2020-29471
OpenCart Stored Cross-Site Scripting
Medium
CVE-2020-29470
OpenCart Cross-site Scripting (XSS) in the Subject field of mail.
Critical
CVE-2020-28277
dset vulnerable to prototype pollution
Critical
CVE-2020-28276
Prototype pollution vulnerability in 'deep-set'
Critical
CVE-2020-28279
flattenizer vulnerable to prototype pollution
Critical
CVE-2020-28278
shvl vulnerable to prototype pollution
High
CVE-2020-35136
Dolibarr authenticated Remote Code Execution
Critical
CVE-2020-22083
** DISPUTED ** jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and cle
Medium
CVE-2020-10770
Keycloak vulnerable to Server-Side Request Forgery
Critical
CVE-2020-20136
QuantConnect Lean vulnerable to insecure deserialization
Medium
CVE-2020-7790
browsershot local file inclusion vulnerability
Low
CVE-2020-28838
OpenCart Cross-Site Request Forgery (CSRF)
Low
CVE-2020-8920
Information leak in Gerrit
High
CVE-2020-16971
Azure SDK for Java Security Feature Bypass Vulnerability
Medium
CVE-2020-27822
Wildfly has a memory leak vulnerability
Medium
CVE-2020-25631
Moodle Cross-site Scripting (XSS)
Medium
CVE-2020-25627
Moodle stored Cross-site Scripting (XSS)
High
CVE-2020-25630
Moodle Denial of Service
High
CVE-2020-25629
Moodle incorrect access control
Medium
CVE-2020-29565
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo
Medium
CVE-2020-27348
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plu
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.