Critical
CVE-2020-15131
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2020-15130
False-positive validity for NFT1 genesis transactions in SLPJS
Medium
ffe9bfbd-3672-4162-bb1b-675c7eb9e655
Konzept - Fullscreen Portfolio WordPress Theme <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2020-36667
JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change
Medium
CVE-2020-36668
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure
High
CVE-2020-8116
dot-prop Prototype Pollution vulnerability
High
CVE-2020-13822
Signature Malleabillity in elliptic
High
CVE-2020-11994
Server side template injection in Apache Camel
High
CVE-2020-15515
Remote code execution in turn extension for TYPO3
Medium
CVE-2020-15513
Incorrect access control in typo3_forum
High
CVE-2020-7686
Directory traversal in rollup-plugin-server
High
CVE-2020-7683
Directory traversal in rollup-plugin-server
High
CVE-2020-7685
Insecure defaults in UmbracoForms
High
CVE-2020-15125
Authorization header is not sanitized in an error object in auth0
High
CVE-2020-15099
Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
High
CVE-2020-15098
Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
Critical
CVE-2020-15086
Potential Remote Code Execution in TYPO3 with mediace extension
High
ghsa-gm9x-q798-hmr4
Command Injection in git-tags-remote
Critical
CVE-2020-7698
Command injection in Gerapy
Unrated
drupal-contrib-2020-030
drupal/group - SA-CONTRIB-2020-030
Medium
3f378797-a7a7-4691-8d37-1caef454bb4f
Quiz and Survey Master <= 6.4.12 - Stored Cross-Site Scripting
High
22476135-8951-4012-845b-46a5dfbfc1f5
Gallery PhotoBlocks <= 1.1.5 - Cross-Site Scripting
Medium
CVE-2020-1937
SQL Injection in Kylin
High
Exploited in attacks
CVE-2020-1956
Command Injection in Kylin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.