Critical
CVE-2020-13926
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2020-13925
Command Injection in Kylin
High
CVE-2020-10379
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
Critical
CVE-2020-14000
Remote Code Execution in scratch-vm
Medium
CVE-2020-15120
Authorization Bypass in I hate money
High
CVE-2020-7687
Directory traversal in fast-http
Medium
CVE-2020-8175
Uncontrolled resource consumption in jpeg-js
High
CVE-2020-7695
HTTP response splitting in uvicorn
High
CVE-2020-7694
Log injection in uvicorn
High
CVE-2018-21036
Improper Input Validation in sails-hook-sockets
Medium
6bbb0e81-8edd-44fa-9588-16c163a82ed1
JobCareer <= 3.4 - Cross-Site Scripting
Medium
607d1a6e-2277-4960-a5bd-95e94c510856
FoodBakery <= 1.9 - Reflected Cross-Site Scripting
Medium
5f7c4c26-ff77-4be0-946c-5480b4a28017
Home Villas | Real Estate WordPress Theme <= 2.2 - Cross-Site Scripting
Medium
31b52500-c53c-4606-b57c-cd14bb66afa9
JobCareer <= 3.4 - Multiple Cross-Site Scripting
Medium
2006dbb8-2aa8-4890-b6ce-18257c64b970
JobSearch WP Job Board <= 1.5.5 - Reflected Cross-Site Scripting
Medium
ghsa-wvh7-5p38-2qfc
Storing Password in Local Storage
Unrated
714
JCE Pro - xss
Medium
db3b206d-16c5-48fb-800d-d017a0c76630
Ultimate Member <= 2.1.6 - Open Redirect
Medium
185f9dc4-39e6-422a-97e2-7e8814ccf64a
Real Estate 7 <= 3.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2020-15126
GraphQL: Security breach on Viewer query
Unrated
drupal-contrib-2020-029
drupal/modal_form - SA-CONTRIB-2020-029
Unrated
drupal-contrib-2020-028
drupal/apigee_edge - SA-CONTRIB-2020-028
Unrated
drupal-contrib-2020-027
drupal/easy_breadcrumb - SA-CONTRIB-2020-027
High
CVE-2020-5611
Social Rocket – Social Sharing Plugin < 1.2.10 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.