Medium
CVE-2021-3818
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
High
ghsa-36mj-6r7r-mqhf
User can obtain JWT token even if account is disabled
Unrated
drupal-contrib-2021-037
drupal/domain_group - SA-CONTRIB-2021-037
Unrated
drupal-contrib-2021-036
drupal/miniorange_saml - SA-CONTRIB-2021-036
Unrated
drupal-contrib-2021-032
drupal/commerce - SA-CONTRIB-2021-032
Unrated
drupal-contrib-2021-031
drupal/cshs - SA-CONTRIB-2021-031
High
CVE-2020-13677
Drupal core - SA-CORE-2021-010
Unrated
CVE-2020-13673
Drupal core - SA-CORE-2021-006
High
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
High
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Critical
CVE-2021-38302
SQL injection in TYPO3 extension
Medium
CVE-2021-36793
CSRF token exposure in TYPO3 extension
High
CVE-2021-25956
Dolibarr vulnerable to Improper Authentication and Improper Access Control
High
CVE-2021-25957
Weak Password Recovery Mechanism for Forgotten Password
Low
CVE-2021-27913
Use of a Broken or Risky Cryptographic Algorithm
Medium
CVE-2021-27909
XSS vulnerability on password reset page
High
CVE-2021-27910
Stored XSS vulnerability on Bounce Management Callback
High
CVE-2021-27911
XSS vulnerability on contacts view
High
CVE-2021-27912
XSS vulnerability on asset view
Medium
CVE-2021-36788
Cross-site Scripting in the yoast_seo TYPO3 extension
High
CVE-2021-36804
Malicious password-reset in Akaunting
Critical
CVE-2021-25955
Dolibarr Cross-site Scripting vulnerability
High
CVE-2021-39136
Cross-site scripting vulnerability in file upload
Medium
CVE-2021-37709
Insecure direct object reference of log files of the Import/Export feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.