Critical
CVE-2020-5262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
7e4e1afd-604d-45c2-ab6b-fa9ccac0c361
All Import Pro Plugin < 4.1.2 - SQL injection
Unrated
drupal-core-2020-001
Drupal core - SA-CORE-2020-001
High
CVE-2019-10682
django-nopassword stores secrets in cleartext
Medium
32ac72f7-6bcc-4b5d-925a-9c5fc0c1f065
Advanced Ads <= 1.17.3 - Reflected Cross-Site Scripting
Medium
CVE-2020-13644
Accordion <= 2.2.8 - Unprotected AJAX Action to Stored/Reflected Cross-Site Scripting
High
08115f30-f38b-4c13-803e-5de873f83a17
Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2019-19135
Insufficient Nonce Validation in Eclipse Milo Client
Medium
CVE-2020-1740
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Low
CVE-2020-1738
Argument Injection in Ansible
Medium
CVE-2020-1736
Incorrect Permission Assignment for Critical Resource in Ansible
Medium
CVE-2020-1735
Path Traversal in Ansible
Medium
CVE-2020-1753
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Medium
e91e6101-bd30-4cf1-9a39-23218c3bff6f
Newsletter <= 6.5.3 - CSV Injection
High
CVE-2020-7916
LearnPress <= 3.2.6.6 - Privilege Escalation
Critical
CVE-2020-10594
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
Critical
CVE-2020-10571
Potential buffer overflow in psd-tools
Medium
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
High
CVE-2020-5256
Remote Code Execution Through Image Uploads in BookStack
Critical
CVE-2020-10564
WordPress File Upload <= 4.12.2 - Directory Traversal to Remote Code Execution
High
CVE-2020-36842
Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2020-36704
Fruitful < 3.8.2 - Stored Cross-Site Scripting
Low
CVE-2020-1739
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Critical
CVE-2020-10109
HTTP Request Smuggling in Twisted
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.