Medium
CVE-2020-28487
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2020-28501
Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
Critical
CVE-2021-26275
Command injection in eslint-fixer
Medium
CVE-2021-28161
Improper Neutralization of Input in Theia console
Critical
CVE-2020-28360
Server-Side Request Forgery in private-ip
Critical
CVE-2020-27224
Cross-site Scripting (XSS) in Eclipse Theia
High
CVE-2019-17636
Insufficient Verification of Data Authenticity in Eclipse Theia
High
CVE-2019-10783
OS Command Injection in lsof
Critical
CVE-2019-10786
Improper Input Validation in network-manager
High
CVE-2019-10788
OS Command Injection in im-metadata
High
CVE-2019-10787
OS Command Injection in im-resize
High
CVE-2021-23360
Command Injection in killport
Critical
CVE-2020-7775
Improper neutralization of arguments in freediskspace
High
CVE-2021-27191
Denial of Service in get-ip-range
Critical
CVE-2021-26541
Command injection in gitlog
Critical
ghsa-88rc-3p98-rgvx
After order payment process manipulation in shopware/platform and shopware/core
Medium
ghsa-3pcr-4982-548m
Exposure of .env if project root is configured as web root in shopware/production
Critical
ghsa-qg7c-q3vq-rgxr
Leak of information via Store-API aggregations in shopware/platform and shopware/core
Low
ghsa-7fjp-g4m7-fx23
User (Encrypted) Password Field Being Serialised
Medium
ghsa-63rq-p8fp-524q
Potential API key leak
High
CVE-2020-24144
Media File Organizer <= 1.0.1 - Directory Traversal
High
CVE-2020-24143
Video Downloader for TikTok < 1.4 - Directory Traversal
Critical
CVE-2020-24148
Import XML and RSS Feeds <= 2.0.2 - Server-Side Request Forgery
Medium
CVE-2021-24255
Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.