High
CVE-2012-0881
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2009-2625
Denial of service in Apache Xerces2
Critical
Exploited in attacks
CVE-2020-1938
Improper Privilege Management in Tomcat
High
CVE-2019-0199
Apache Tomcat Denial of Service vulnerability
High
CVE-2018-12023
Deserialization of Untrusted Data
Critical
CVE-2019-17267
Improper Input Validation in jackson-databind
High
CVE-2020-36701
Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload
High
CVE-2020-36700
Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control
Critical
CVE-2020-13640
Comments - wpDiscuz <= 5.3.5 - Blind SQL Injection via order Parameter
High
CVE-2020-4045
Information disclosure in SSB-DB
Critical
CVE-2020-11090
Uncontrolled Resource Consumption in Indy Node
High
CVE-2014-0114
Arbitrary code execution in Apache Commons BeanUtils
High
CVE-2020-11112
jackson-databind mishandles the interaction between serialization gadgets and typing
Medium
CVE-2014-8122
Information disclosure in JBoss Weld
Critical
CVE-2020-7628
Command Injection in umount
Critical
CVE-2020-7617
Prototype Pollution in ini-parser
High
CVE-2020-7226
Denial of Service in Cryptacular
Critical
CVE-2019-10781
Validation Bypass in schema-inspector
Critical
CVE-2019-17570
Insecure Deserialization in Apache XML-RPC
Medium
CVE-2019-17573
Reflected Cross-Site Scripting in Apache CXF
High
CVE-2020-4043
Phar unserialization vulnerability in phpMussel
Unrated
drupal-contrib-2020-024
drupal/open_readspeaker - SA-CONTRIB-2020-024
Medium
CVE-2020-4048
WordPress Core < 5.4.2 - Open Redirect
Low
CVE-2020-4049
WordPress Core < 5.4.2 - Self-Cross Site Scripting via Theme Folder Name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.