High
CVE-2020-7683
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filters
High
CVE-2020-15125
Authorization header is not sanitized in an error object in auth0
High
ghsa-gm9x-q798-hmr4
Command Injection in git-tags-remote
Critical
CVE-2020-14000
Remote Code Execution in scratch-vm
High
CVE-2020-7687
Directory traversal in fast-http
Medium
CVE-2020-8175
Uncontrolled resource consumption in jpeg-js
High
CVE-2018-21036
Improper Input Validation in sails-hook-sockets
Medium
ghsa-wvh7-5p38-2qfc
Storing Password in Local Storage
Medium
CVE-2020-15126
GraphQL: Security breach on Viewer query
Medium
CVE-2020-15123
Command injection in codecov (npm package)
Medium
CVE-2020-8203
WordPress Core < 5.8.1 - LoDash Update
Medium
ghsa-7xcx-6wjh-7xp2
Command Injection in standard-version
High
CVE-2020-15092
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
High
CVE-2020-15779
Path Traversal in socket.io-file
Medium
ghsa-jmqm-f2gx-4fjv
Sensitive information exposure through logs in npm-registry-fetch
Medium
CVE-2020-15095
npm CLI exposing sensitive information through logs
Medium
CVE-2020-4075
Arbitrary file read via window-open IPC in Electron
High
CVE-2020-4077
Context isolation bypass via contextBridge in Electron
High
CVE-2020-4076
Context isolation bypass via leaked cross-context objects in Electron
Low
CVE-2020-15096
Context isolation bypass via Promise in Electron
High
CVE-2020-15084
Authorization bypass in express-jwt
Medium
ghsa-g753-jx37-7xwh
ECDSA signature vulnerability of Minerva timing attack in jsrsasign
High
CVE-2020-14966
ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign
Critical
CVE-2020-14967
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.