Missing Update

This page lists 22224 vulnerabilities in this category.

Critical: 1394 High: 12186 Medium: 7891 Low: 749 Information: 4

Vulnerability Name

CVE

CWE

Severity

qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8391)

CVE-2019-8391

CWE-707

Medium

qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8390)

CVE-2019-8390

CWE-707

Medium

Bootstrap Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8331)

CVE-2019-8331

CWE-707

Medium

Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8279)

CVE-2019-8279

CWE-707

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8233)

CVE-2019-8233

CWE-707

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8148)

CVE-2019-8148

CWE-707

Medium

Magento Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-8232)

CVE-2019-8232

CWE-362

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8228)

CVE-2019-8228

CWE-707

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8227)

CVE-2019-8227

CWE-707

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8157)

CVE-2019-8157

CWE-707

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8153)

CVE-2019-8153

CWE-707

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8152)

CVE-2019-8152

CWE-707

Medium

ownCloud Improper Authentication Vulnerability (CVE-2020-10254)

CVE-2020-10254

CWE-287

Medium

Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-10596)

CVE-2020-10596

CWE-707

Medium

Magento Cleartext Storage of Sensitive Information Vulnerability (CVE-2019-8118)

CVE-2019-8118

CWE-312

Medium

Apache HTTP Server Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-11985)

CVE-2020-11985

CWE-345

Medium

Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-12458)

CVE-2020-12458

CWE-312

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12438)

CVE-2020-12438

CWE-707

Medium

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12245)

CVE-2020-12245

CWE-707

Medium

Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12137)

CVE-2020-12137

CWE-707

Medium

Mailman Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-12108)

CVE-2020-12108

CWE-138

Medium

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12052)

CVE-2020-12052

CWE-707

Medium

Joomla Incorrect Authorization Vulnerability (CVE-2020-11891)

CVE-2020-11891

CWE-863

Medium

Play Framework Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-12480)

CVE-2020-12480

CWE-352

Medium

Joomla Improper Input Validation Vulnerability (CVE-2020-11890)

CVE-2020-11890

CWE-20

Medium

Joomla Incorrect Authorization Vulnerability (CVE-2020-11889)

CVE-2020-11889

CWE-863

Medium

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11823)

CVE-2020-11823

CWE-707

Medium

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11822)

CVE-2020-11822

CWE-707

Medium

Rukovoditel Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11821)

CVE-2020-11821

CWE-312

Medium

qdPM Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-11814)

CVE-2020-11814

CWE-138

Medium

Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-12459)

CVE-2020-12459

CWE-200

Medium

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12625)

CVE-2020-12625

CWE-707

Medium

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41866)

CVE-2021-41866

CWE-707

Medium

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13239)

CVE-2020-13239

CWE-707

Medium

Liferay Portal CVE-2020-13444 Vulnerability (CVE-2020-13444)

CVE-2020-13444

-

Medium

Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-13435)

CVE-2020-13435

CWE-476

Medium

Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2020-13434)

CVE-2020-13434

CWE-190

Medium

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13430)

CVE-2020-13430

CWE-707

Medium

Django Improper Certificate Validation Vulnerability (CVE-2020-13254)

CVE-2020-13254

CWE-295

Medium

Dolibarr Incorrect Default Permissions Vulnerability (CVE-2020-13240)

CVE-2020-13240

CWE-276

Medium

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13094)

CVE-2020-13094

CWE-707

Medium

Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-12626)

CVE-2020-12626

CWE-352

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12718)

CVE-2020-12718

CWE-707

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12708)

CVE-2020-12708

CWE-707

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12706)

CVE-2020-12706

CWE-707

Medium

TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12648)

CVE-2020-12648

CWE-707

Medium

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12639)

CVE-2020-12639

CWE-707

Medium

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12629)

CVE-2020-12629

CWE-707

Medium

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11813)

CVE-2020-11813

CWE-707

Medium

PleskLin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11584)

CVE-2020-11584

CWE-707

Medium

Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687)

CVE-2020-10687

CWE-444

Medium

phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-10803)

CVE-2020-10803

CWE-138

Medium

jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11022)

CVE-2020-11022

CWE-707

Medium

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11022)

CVE-2020-11022

CWE-707

Medium

WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11022)

CVE-2020-11022

CWE-707

Medium

MediaWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-10960)

CVE-2020-10960

CWE-116

Medium

MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-10959)

CVE-2020-10959

CWE-601

Medium

Ruby Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-10933)

CVE-2020-10933

CWE-200

Medium

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10719)

CVE-2020-10719

CWE-444

Medium

WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)

CVE-2020-11023

CWE-707

Medium

Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10719)

CVE-2020-10719

CWE-444

Medium

WebLogic Improper Input Validation Vulnerability (CVE-2020-10693)

CVE-2020-10693

CWE-20

Medium

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29049)

CVE-2021-29049

CWE-707

Medium

Jboss EAP Improper Input Validation Vulnerability (CVE-2020-10693)

CVE-2020-10693

CWE-20

Medium

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-10688)

CVE-2020-10688

CWE-707

Medium

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687)

CVE-2020-10687

CWE-444

Medium

jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)

CVE-2020-11023

CWE-707

Medium

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)

CVE-2020-11023

CWE-707

Medium

PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11584)

CVE-2020-11584

CWE-707

Medium

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11110)

CVE-2020-11110

CWE-707

Medium

PleskLin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11583)

CVE-2020-11583

CWE-707

Medium

PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11583)

CVE-2020-11583

CWE-707

Medium

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11456)

CVE-2020-11456

CWE-707

Medium

LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-11455)

CVE-2020-11455

CWE-22

Medium

phpMyAdmin Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-11441)

CVE-2020-11441

CWE-138

Medium

«
1
...
276
277
278
...
297
»