Critical
CVE-2020-9580
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Critical
CVE-2020-9576
Magento command injection vulnerability
Medium
CVE-2020-9581
Magento stored cross-site scripting vulnerability
Medium
CVE-2020-9577
Magento stored cross-site scripting vulnerability
Critical
CVE-2020-9579
Magento Security mitigation bypass vulnerability
Medium
CVE-2020-10727
ActiveMQ Artemis has Insufficiently Protected Credentials
Medium
CVE-2020-15005
img_auth.php may leak private extension images into the public cache
Critical
CVE-2018-21268
Node-Traceroute RCE Vulnerability
Medium
CVE-2020-15015
GleamTech FileUltimate Cross-site Scripting
Medium
CVE-2020-13157
NukeViet Cross-Site Request Forgery (CSRF)
Medium
CVE-2020-13156
NukeViet Cross-Site Request Forgery (CSRF)
High
CVE-2020-13155
NukeViet Cross-Site Request Forgery (CSRF)
High
CVE-2020-10740
Wildfly Unsafe Deserialization Vulnerability
Medium
CVE-2020-14475
Dolibarr reflected cross-site scripting (XSS) vulnerability
High
CVE-2020-5590
EC-CUBE Directory traversal vulnerability
High
CVE-2020-14019
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
Medium
CVE-2020-13961
Improper Input Validation in strapi
High
CVE-2019-20891
WooCommerce Cross-Site Request Forgery (CSRF)
High
CVE-2020-14443
Dolibarr SQL injection vulnerability in accountancy/customer/card.php
Medium
CVE-2020-7932
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, t
High
CVE-2020-12827
MJML vulnerable to path traversal
Medium
CVE-2020-14146
KumbiaPHP Cross-site Scripting
High
CVE-2018-16848
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can l
High
CVE-2020-5411
Deserialization of Untrusted Data in Spring Batch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.