Medium
CVE-2019-10785
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
8fcf7283-eb6c-4fee-b606-79026e2227fc
Profile Builder <= 3.1.0 - Privilege Escalation
High
CVE-2020-8435
RegistrationMagic - Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.2 - SQL Injection
Medium
CVE-2019-19703
URL Redirection to Untrusted Site (Open Redirect) in Ktor
High
Exploited in attacks
CVE-2019-17558
Improper Input Validation in Apache Solr
High
CVE-2019-10911
Improper authentication in Symfony
High
CVE-2019-10912
Deserialization of untrusted data in Symfony
Critical
CVE-2019-11325
Improper Input Validation in Symfony
Critical
CVE-2019-16194
SQL injection in Centreon
Medium
CVE-2020-20633
GDPR Cookie Consent & Compliance Notice <= 1.8.2 - Authenticated Stored Cross-Site Scripting and Authorization Bypass
Critical
92915943-c6ff-46df-adbd-382eabe44021
Manage WP Worker <= 4.9.2 - Authentication Bypass
High
CVE-2020-8596
Participants Database <= 1.9.5.5 - SQL Injection
High
CVE-2020-7241
WP Database Backup <= 5.5 - Unauthenticated Information Disclosure
Medium
CVE-2020-36833
Indeed Membership Pro 7.3 - 8.6 - Missing Authorization Checks
Critical
CVE-2020-36832
Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass
High
74b81d31-8ee6-47cf-a5e8-3cf0900ebea0
Events Manager < 5.9.7.2 & Events Manager Pro < 2.6.7.2 - Unauthenticated CSV Injection
Unrated
drupal-contrib-2020-003
drupal/views_bulk_operations - SA-CONTRIB-2020-003
Critical
CVE-2020-6174
Incorrect threshold signature computation in TUF
High
fc9cb292-94cb-4d1e-a0b7-98856db7c28e
Merge + Minify + Refresh <= 1.10.7 - Cross-Site Request Forgery leading to Arbitrary File Deletion and Site Reset
High
CVE-2020-36836
WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
156e64f2-87a4-40a0-bac8-3dc1f702b0a1
Events Manager <= 5.9.7.1 - CSV Injection
High
CVE-2019-10172
Improper Restriction of XML External Entity Reference in jackson-mapper-asl
High
CVE-2020-1925
Server-Side Request Forgery (SSRF) in Apache Olingo
Critical
CVE-2019-17556
Deserialization of Untrusted Data in Apache Olingo
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.