Critical
CVE-2021-43421
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2016-5385
HTTP Proxy header vulnerability
High
CVE-2021-43008
Files or Directories Accessible to External Parties in Adminer
High
CVE-2022-1213
Server side request forgery in LiveHelperChat
High
CVE-2022-1235
Weak password hash in LiveHelperChat
High
CVE-2022-26986
SQL injection in ImpressCMS
Medium
CVE-2022-27463
Open redirect in wwbn/avideo
High
CVE-2022-0602
Cross-site Scripting in TastyIgniter
Low
ghsa-wf98-vxv9-jqfv
XSS Injection Vulnerability
High
ghsa-5jfw-35xp-5m42
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
High
CVE-2021-43464
Remote code execution in Subrion
Low
CVE-2022-0088
Cross-Site Request Forgery in YOURLS
Critical
CVE-2022-28368
Remote code injection in dompdf/dompdf
Medium
CVE-2022-28378
Cross-site Scripting in craftcms/cms
Critical
CVE-2021-44135
SQL injection in pagekit/pagekit
High
ghsa-xhr8-mpwq-2rr2
Automatic named constructor discovery in Valinor
Medium
ghsa-6v6p-g8cg-2hgg
Improper Certificate Validation in node-sass affects eZ Platform
High
CVE-2021-36625
SQL Injection in Dolibarr
High
CVE-2021-37517
Access Control vulnerability in Dolibarr
High
CVE-2021-34257
Unrestricted Upload of File with Dangerous Type in WPanel 4
High
CVE-2022-1176
Type Confusion in LiveHelperChat
High
CVE-2022-1155
Old sessions not blocked by login enable function in Snipe-IT
High
CVE-2022-23793
Path Traversal within joomla/archive tar class
Medium
CVE-2022-23794
Path Disclosure within joomla/filesystem class
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.