Critical
da6eb803-3e2a-4ff1-9b93-6f109e8d0714
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2020-15147
Remote Code Execution in Red Discord Bot
Medium
CVE-2020-15140
Remote Code Execution in Red Discord Bot
High
CVE-2020-36717
Kali Forms <= 2.1.1 - Cross-Site Request Forgery
High
CVE-2020-36720
Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
High
CVE-2020-36712
Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2020-7689
Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt
Medium
CVE-2020-35934
Advanced Access Manager <= 6.6.1 - Authenticated Information Disclosure
Medium
CVE-2021-24135
WP Customer Reviews <= 3.4.2 - Multiple Stored Cross-Site Scripting
Medium
CVE-2020-36834
Discount Rules for WooCommerce <= 2.0.2 - Missing Authorization
High
CVE-2020-11497
NAB Transact < 2.1.2 - Payment System Bypass
Low
CVE-2020-15119
DOM-based XSS in auth0-lock
High
CVE-2020-15143
Remote Code Execution in SyliusResourceBundle
Critical
CVE-2020-15146
Remote Code Execution in SyliusResourceBundle
High
CVE-2020-15151
Observable Timing Discrepancy in OpenMage LTS
Medium
da15614b-6619-4ccb-93eb-12923910fb41
Click to top <= 1.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2020-12480
CSRF in Play Framework
Critical
CVE-2020-35950
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.152 - Cross-Site Request Forgery
High
CVE-2020-35948
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions
Medium
0512e478-210f-42a9-86ea-a892cd6cfcd1
Internal Links Manager <= 2.1.0 - Multiple Stored Cross-Site Scripting
Critical
CVE-2020-15152
Server-Side Request Forgery in ftp-srv
Medium
fd3d9ce8-0ebf-490e-8c3a-73883638c3eb
NextGEN Gallery Sell Photo <= 1.0.4 - Stored Cross-Site Scripting
Medium
9ddc2f44-e53f-45c2-b293-ad4abc8cff8f
Geo Magazine Theme <= 2.0 - Reflected Cross-Site Scripting
Medium
7def307b-5788-4cb4-82a4-517c5c9fe500
Easy Media Download <= 1.1.4 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.