Low
CVE-2020-2239
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2020-2240
CSRF vulnerability in Jenkins Database Plugin
High
CVE-2020-2246
Stored XSS vulnerability in Jenkins Valgrind Plugin
High
CVE-2020-2245
XXE vulnerability in Jenkins Valgrind Plugin
Medium
CVE-2020-13828
Dolibarr stored Cross-Site Scripting (XSS) vulnerability
Critical
CVE-2020-24714
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.
Critical
CVE-2020-24715
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltNam
Medium
CVE-2020-24653
Expo on iOS is insecure due incorrect security attribute application
High
CVE-2020-17376
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously underg
High
CVE-2020-15777
Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data
Medium
CVE-2020-14042
Codiad Cross-site Scripting Vulnerability
High
CVE-2020-14044
Codiad SSRF Vulnerability
High
CVE-2020-14043
Codiad CSRF Vulnerability
Medium
CVE-2020-14201
Dolibarr CRM allows Privilege Escalation
Medium
CVE-2020-7019
Improper privilege management in elasticsearch
Medium
CVE-2020-8226
phpBB Server-Side Request Forgery Vulnerability
Critical
CVE-2020-7704
linux-cmdline is vulnerable to Prototype Pollution via the constructor
High
CVE-2020-1597
ASP.NET Core Denial of Service Vulnerability
High
CVE-2020-2235
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Medium
CVE-2020-2237
CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Medium
CVE-2020-2233
Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
High
CVE-2020-2236
Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin
High
CVE-2020-2230
Jenkins Cross-site Scripting vulnerability in project naming strategy
Medium
CVE-2020-2231
Improper Neutralization of Input During Web Page Generation in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.