High
CVE-2020-28243
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2020-35662
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.
Critical
CVE-2021-26700
Remote code execution in vscode-npm-script
Critical
CVE-2021-24112
.NET Core Remote Code Execution Vulnerability
Medium
CVE-2021-1721
Denial of service in .NET core
Medium
CVE-2021-21616
Stored XSS vulnerability in Jenkins Active Choices Plugin
Low
CVE-2021-21621
Support bundles can include user session IDs in Jenkins Support Core Plugin
Medium
CVE-2021-21622
Stored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin
Medium
CVE-2021-21619
XSS vulnerability in Jenkins Claim Plugin
Medium
CVE-2021-21618
Stored XSS vulnerability in Jenkins Repository Connector Plugin
High
CVE-2021-21617
CSRF vulnerability in Jenkins Configuration Slicing Plugin
Medium
CVE-2020-35571
MantisBT XSS in manage_custom_field_update.php
High
CVE-2021-3396
OpenNMS Horizon RCE via JEXL2 expression
High
CVE-2020-36245
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi
Medium
CVE-2020-25340
An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a
Medium
CVE-2021-23338
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.
Medium
CVE-2021-21031
Magento Insufficient Session Expiration
Medium
CVE-2021-21022
Magento Insecure Direct Object Reference (IDOR) in the product module
Medium
CVE-2021-21027
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API
Medium
CVE-2021-21032
Magento Insufficient Session Expiration
Medium
CVE-2021-21023
Magento stored cross-site scripting vulnerability in the admin console
High
CVE-2021-21030
Magento stored cross-site scripting (XSS) in the customer address upload feature
Medium
CVE-2021-21026
Magento improper authorization vulnerability in the integrations module
Critical
CVE-2021-21019
Magento XML injection in the Widgets module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.