Medium
CVE-2020-2104
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2020-2099
Inbound TCP Agent Protocol/3 authentication bypass in Jenkins
Medium
CVE-2020-2103
Jenkins Diagnostic page exposed session cookies
Medium
CVE-2020-2101
Non-constant time comparison of inbound TCP agent connection secret
Medium
CVE-2020-2102
Non-constant time HMAC comparison
Medium
CVE-2020-7934
Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet
Critical
CVE-2020-7995
Dolibarr Improper Restriction of Excessive Authentication Attempts
Medium
CVE-2020-8091
Typo3 Cross-Site Scripting in Flash component (ELTS)
Medium
CVE-2020-7994
Dolibarr cross-site scripting (XSS) vulnerability
Medium
CVE-2015-3154
Zenario CMS vulnerable to CRLF injection
High
CVE-2020-7596
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
High
CVE-2020-7938
Plone Privilege Escallation
Medium
CVE-2020-7936
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirec
Medium
CVE-2020-7937
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
High
CVE-2020-7939
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
High
CVE-2020-7940
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
Medium
CVE-2020-7210
Umbraco CMS vulnerable to CSRF
High
CVE-2019-14888
Undertow vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2019-17361
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint
Medium
CVE-2020-5502
phpBB allows CSRF
Medium
CVE-2020-5501
phpBB Cross-Site Request Forgery (CSRF)
High
CVE-2020-2092
XXE vulnerability in Jenkins Robot Framework Plugin
Medium
CVE-2020-2095
Redgate SQL Change Automation Plugin stored credentials in plain text
Medium
CVE-2020-2094
Missing permission checks in Health Advisor by CloudBees Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.