Medium
CVE-2012-5784
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
e3a8f554-7cb6-40b7-b83c-819e7785058a
HyperComments <= 1.2.2 - Arbitrary File Deletion
Medium
CVE-2020-28650
WPBakery Page Builder for WordPress <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
Low
CVE-2020-15215
Context isolation bypass in Electron
High
CVE-2020-15174
Unpreventable top-level navigation
High
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
High
9f9e5212-caed-46db-bbf2-81c4df88439f
LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection
High
CVE-2020-15170
Potential access control security issue in apollo-adminservice
Low
ghsa-f366-4rvv-95x2
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Medium
CVE-2020-6506
Android WebView Universal Cross-site Scripting
High
CVE-2020-15227
Potential Remote Code Execution vulnerability
High
CVE-2020-24807
File restriction bypass in socket.io-file
Critical
CVE-2020-26511
WPO365 | LOGIN <= 11.6 - Authentication Bypass
Low
CVE-2020-15228
Environment Variable Injection in GitHub Actions
Critical
ghsa-mfc2-93pr-jf92
Malicious code in `loadyaml`
Critical
ghsa-38hx-3542-8fh3
Malicious code in `electorn`
Medium
CVE-2020-36721
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
Critical
CVE-2020-36708
Epsilon Framework Themes (Various Versions) - Function Injection
Medium
CVE-2020-25626
Cross-site Scripting (XSS) in Django REST Framework
Medium
CVE-2020-26137
CRLF injection in urllib3
Medium
37f47ce1-0657-414d-a491-99f2722a44f5
BA Book Everything Plugin < 1.3.25 - Cross-Site Scripting and Cross-Frame Scripting
High
CVE-2021-24132
Slider by 10Web <= 1.2.35 - SQL Injection
High
CVE-2020-26876
WP Courses <= 2.0.28 - Improper Access Controls
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.