Medium
CVE-2020-26291
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
CVE-2020-26296
XSS in Vega
Unrated
728
RealPin by Frumania - 1.5.04
Critical
CVE-2020-36727
Newsletter Manager <= 1.5.1 - Insecure Deserialization
Low
CVE-2020-26288
Parse Server stores password in plain text
High
0f87d37a-879f-4506-a651-8c965a558e28
Thumbnail carousel slider < 1.0.1 - Stored Cross-Site Scripting and Cross-Site Request Forgery
Medium
CVE-2020-35678
Open Redirect in autobahn
Medium
CVE-2020-29172
LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting
High
CVE-2020-26282
Server-Side Template Injection
High
CVE-2020-26289
regular expression denial of service (ReDoS)
High
CVE-2020-11093
Hyperledger Indy's update process of a DID does not check who signs the request
Medium
CVE-2021-25117
WP-PostRatings <= 1.86 - Cross-Site Scripting
Medium
CVE-2020-29171
All In One WP Security & Firewall <= 4.4.5 - Cross-Site Scripting
High
CVE-2020-35773
Site Offline Or Coming Soon Or Maintenance Mode <= 1.4.2 - Cross-Site Request Forgery and Cross-Site Scripting
High
CVE-2019-6715
W3 Total Cache 0.9.2.6-0.9.3 - File Read / Directory Traversal
Medium
CVE-2020-26275
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1
Low
ghsa-8pfh-mm2g-hmc3
Authenticated Server Side Request Forgery
Low
ghsa-cq6h-w3mc-57f4
Information exposure via query strings in URL
Low
ghsa-5q58-x5h2-v5rx
Authenticated Privilege Escalation
High
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
High
CVE-2020-26263
RSA weakness in tslite-ng
Medium
CVE-2020-26258
Server-Side Forgery Request can be activated unmarshalling with XStream
Medium
CVE-2020-26259
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
Medium
CVE-2020-26227
Cross-Site Scripting in Fluid view helpers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.