Medium
CVE-2020-13094
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2020-5529
Code execution vulnerability in HtmlUnit
Critical
CVE-2020-1953
Remote code execution in Apache Commons Configuration
High
CVE-2020-9484
Potential remote code execution in Apache Tomcat
Medium
CVE-2020-7655
HTTP Request Smuggling in netius
Medium
CVE-2020-8934
Site Kit by Google <= 1.7.1 - Sensitive Information Disclosure
Medium
CVE-2020-13426
multi Scheduler <= 1.0.0 - Cross-Site Request Forgery
High
06bc7a24-eafc-4b06-852e-9b596f107805
Contact Form by WPForms <= 1.6.0.1 - Cross-Site Scripting
Medium
CVE-2020-7656
Cross-Site Scripting in jquery
Medium
CVE-2020-11078
CRLF injection in httplib2
Unrated
drupal-core-2020-002
Drupal core - SA-CORE-2020-002
Unrated
700
Ordasoft CCK - 6.1.12 Various
Medium
CVE-2020-5579
Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection
High
ab520bcb-5739-4b99-ad93-73416ab39084
WP Frontend Profile <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2020-36722
Visual Composer <= 26.0 - Multiple Cross-Site Scripting
High
CVE-2021-24140
Ajax Load More plugin < 5.3.2 - SQL Injection
Medium
CVE-2020-12832
Simple File List <= 4.2.7 - Arbitrary File Deletion
Medium
CVE-2021-24128
Team Members <= 5.0.3 - Authenticated Cross-Site Scripting
Unrated
CVE-2020-13091
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties
Critical
CVE-2020-9547
jackson-databind mishandles the interaction between serialization gadgets and typing
High
CVE-2019-14893
Polymorphic deserialization of malicious object in jackson-databind
High
CVE-2020-10673
jackson-databind mishandles the interaction between serialization gadgets and typing
Critical
CVE-2020-9548
jackson-databind mishandles the interaction between serialization gadgets and typing
High
CVE-2019-14892
Polymorphic deserialization of malicious object in jackson-databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.