Critical
CVE-2020-10108
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2020-28978
Canto <= 1.9.0 - Blind Server-Side Request Forgery via tree.php
Medium
CVE-2020-10195
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
High
CVE-2020-28977
Canto <= 1.9.0 - Blind Server-Side Request Forgery via get.php
High
CVE-2020-10196
Popup Builder <= 3.63 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2016-1000111
Forced Browsing in Twisted
Low
CVE-2020-1733
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Unrated
drupal-contrib-2020-006
drupal/saml_sp - SA-CONTRIB-2020-006
Critical
CVE-2020-36713
MStore API <= 2.1.5 - Authentication Bypass
Critical
CVE-2020-11548
Search Meter <= 2.13.2 - Remote Code Execution
Medium
4783eff5-b7cf-4342-b762-85f745c38ec8
Font Awesome 4.0.0-rc15 and 4.0.0-rc16 - API Token Exposure
Medium
CVE-2020-12074
Product Import Export for WooCommerce <= 1.7.4 - Missing Authorization to CSV Import
Low
CVE-2020-5259
Prototype Pollution in Dojox
High
CVE-2020-5258
Prototype pollution in dojo
High
CVE-2020-1737
Path Traversal in Ansible
Critical
CVE-2020-10257
ThemeREX Addons (Various Versions) - Missing Authorization
High
CVE-2020-10568
WPML < 4.3.7 - Cross-Site Request Forgery Bypass
High
CVE-2020-36716
WP Activity Log <= 4.0.1 - Missing Authorization
High
CVE-2020-7212
Uncontrolled Resource Consumption in urllib3
High
ghsa-p94w-42g3-f7h4
Holder can (re)create authentic credentials after receiving a credential in vp-toolkit
High
ghsa-ff5x-w9wg-h275
Holder can generate proof of ownership for credentials it does not control in vp-toolkit
Critical
CVE-2020-36852
Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping
Low
CVE-2015-8476
SMTP Injection in PHPMailer
Medium
CVE-2017-11503
Cross-site scripting in PHPMailer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.