Unrated
drupal-contrib-2020-004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
High
CVE-2020-5237
Relative Path Traversal (CWE-23) in chunked uploads in oneup/uploader-bundle
High
CVE-2019-10911
Improper authentication in Symfony
High
CVE-2019-10912
Deserialization of untrusted data in Symfony
Critical
CVE-2019-11325
Improper Input Validation in Symfony
Critical
CVE-2019-16194
SQL injection in Centreon
Unrated
drupal-contrib-2020-003
drupal/views_bulk_operations - SA-CONTRIB-2020-003
Low
CVE-2020-5218
Ability to switch channels via GET parameter enabled in production environments
Medium
CVE-2020-7996
XSS in Dolibarr ERP & CRM
Critical
CVE-2017-12873
Incorrect persistent NameID generation in SimpleSAMLphp
Medium
CVE-2016-9955
Incorrect signature verification in SimpleSAMLphp
Low
ghsa-2r3v-q9x3-7g46
Link injection in SimpleSAMLphp
Low
CVE-2020-5226
Cross-site scripting in SimpleSAMLphp
Low
CVE-2020-5225
Log injection in SimpleSAMLphp
Unrated
drupal-contrib-2020-002
drupal/spamspan - SA-CONTRIB-2020-002
Medium
CVE-2020-29156
WooCommerce < 4.7.0 - Insecure Direct Object Reference via order_id Parameter
Critical
Exploited in attacks
CVE-2017-9841
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
Critical
CVE-2019-19576
Remote code execution in verot/class.upload.php
Critical
CVE-2019-18622
SQL injection in phpMyAdmin
Medium
CVE-2020-5223
Persistent XSS vulnerability in filename of attached file in PrivateBin
High
CVE-2019-18857
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-wqq8-mqj9-697f
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-f884-gm86-cg3q
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.