High
CVE-2020-15125
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,012
Reset filters
High
ghsa-gm9x-q798-hmr4
Command Injection in git-tags-remote
Critical
CVE-2020-14000
Remote Code Execution in scratch-vm
High
CVE-2018-21036
Improper Input Validation in sails-hook-sockets
Medium
ghsa-wvh7-5p38-2qfc
Storing Password in Local Storage
Medium
CVE-2020-15126
GraphQL: Security breach on Viewer query
Medium
CVE-2020-15123
Command injection in codecov (npm package)
Medium
ghsa-7xcx-6wjh-7xp2
Command Injection in standard-version
High
CVE-2020-15779
Path Traversal in socket.io-file
Medium
CVE-2020-4075
Arbitrary file read via window-open IPC in Electron
High
CVE-2020-4077
Context isolation bypass via contextBridge in Electron
High
CVE-2020-4076
Context isolation bypass via leaked cross-context objects in Electron
Low
CVE-2020-15096
Context isolation bypass via Promise in Electron
High
CVE-2020-15084
Authorization bypass in express-jwt
High
CVE-2020-14966
ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign
Critical
CVE-2020-14967
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
Critical
CVE-2020-14968
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
Medium
CVE-2020-4072
Log Forging in generator-jhipster-kotlin
Low
CVE-2020-4066
Command Injection in Limdu
Critical
CVE-2020-7628
Command Injection in umount
Critical
CVE-2020-7617
Prototype Pollution in ini-parser
High
CVE-2020-4038
Reflected XSS in GraphQL Playground
Medium
ghsa-w42g-7vfc-xf37
Introspection in schema validation in Apollo Server
High
CVE-2020-7662
Regular Expression Denial of Service in websocket-extensions (NPM package)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.