Medium
CVE-2020-3715
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2020-2106
Stored XSS vulnerability in Code Coverage API Plugin
Low
CVE-2020-2105
Jenkins REST APIs vulnerable to clickjacking
High
CVE-2020-2108
XXE vulnerability in Jenkins WebSphere Deployer Plugin
Medium
CVE-2020-2107
Fortify Plugin stored credentials in plain text
Medium
CVE-2020-2100
Jenkins vulnerable to UDP amplification reflection attack
Medium
CVE-2020-2104
Memory usage graphs accessible to anyone with Overall/Read
High
CVE-2020-2099
Inbound TCP Agent Protocol/3 authentication bypass in Jenkins
Medium
CVE-2020-2103
Jenkins Diagnostic page exposed session cookies
Medium
CVE-2020-2101
Non-constant time comparison of inbound TCP agent connection secret
Medium
CVE-2020-2102
Non-constant time HMAC comparison
Medium
CVE-2020-7934
Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet
Critical
CVE-2020-7995
Dolibarr Improper Restriction of Excessive Authentication Attempts
Medium
CVE-2020-8091
Typo3 Cross-Site Scripting in Flash component (ELTS)
Medium
CVE-2020-7994
Dolibarr cross-site scripting (XSS) vulnerability
Medium
CVE-2015-3154
Zenario CMS vulnerable to CRLF injection
High
CVE-2020-7596
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
High
CVE-2020-7938
Plone Privilege Escallation
Medium
CVE-2020-7936
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirec
Medium
CVE-2020-7937
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
High
CVE-2020-7939
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
High
CVE-2020-7940
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
Medium
CVE-2020-7210
Umbraco CMS vulnerable to CSRF
High
CVE-2019-14888
Undertow vulnerable to Uncontrolled Resource Consumption
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.