High
CVE-2020-9298
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-13933
Authentication bypass in Apache Shiro
High
CVE-2020-11976
Exposure of Sensitive Information to an Unauthorized Actor in Apache Wicket
Medium
CVE-2020-1951
Infinite Loop in Apache Tika
Medium
CVE-2020-1950
Uncontrolled Resource Consumption in Apache Tika
Medium
CVE-2020-9489
Missing Release of Memory after Effective Lifetime in Apache Tika
Critical
CVE-2020-13921
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
Critical
CVE-2020-1957
Improper Authentication in Apache Shiro
Critical
CVE-2020-11989
Improper Authentication in Apache Shiro
Critical
CVE-2016-11023
SQL Injection in odata4j
Critical
CVE-2016-11024
SQL Injection in odata4j
Medium
CVE-2021-21419
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
Medium
CVE-2021-32091
Cross-site scripting in LocalStack
Critical
CVE-2021-32090
Command injection in LocalStack
Medium
CVE-2021-24306
Ultimate Member <= 2.1.19 - Reflected Cross-Site Scripting
Medium
CVE-2021-24332
Autoptimize <= 2.8.3 - Stored Cross-Site Scripting
Medium
CVE-2021-24294
DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting
Medium
5b05e973-c0ab-492f-8b51-e7c2f33475ad
leads5050-visitor-insights < 1.0.4 - Unauthenticated Arbitrary License Change
Critical
53580b24-c0a7-4578-bb11-5952ebcacc42
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
High
CVE-2021-4444
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
Medium
15d9c743-5700-482a-a6bc-ecf541ea9e7d
leads5050-visitor-insights <= 1.0.5 - Authorization Bypass
Medium
CVE-2020-13278
Reflected cross-site scripting in francoisjacquet/rosariosis
Medium
CVE-2020-5776
Cross-Site Request Forgery in MAGMI
Critical
CVE-2020-5777
Authentication bypass in MAGMI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.