Medium
CVE-2021-3678
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Low
CVE-2021-27913
Use of a Broken or Risky Cryptographic Algorithm
Medium
CVE-2021-27909
XSS vulnerability on password reset page
High
CVE-2021-27910
Stored XSS vulnerability on Bounce Management Callback
High
CVE-2021-27911
XSS vulnerability on contacts view
High
CVE-2021-27912
XSS vulnerability on asset view
Medium
CVE-2021-36787
Cross-site Scripting in the femanager TYPO3 extension
Medium
CVE-2021-36788
Cross-site Scripting in the yoast_seo TYPO3 extension
High
CVE-2021-36786
Sensitive Data Exposure in miniorange_saml
Critical
CVE-2021-23420
Deserialization of Untrusted Data in codeception/codeception
High
CVE-2021-3689
Use of Insufficiently Random Values in yiisoft/yii2-dev
Medium
CVE-2021-3692
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
Medium
CVE-2020-22392
Cross Site Scripting in Subrion CMS
High
CVE-2021-36804
Malicious password-reset in Akaunting
Medium
CVE-2021-3680
Inadequate Encryption Strength in showdoc
Critical
CVE-2019-19208
Code injection in codiad
High
CVE-2021-39166
Improper Neutralization of Text-Values in Object Version Preview
High
CVE-2021-39170
Improper Encoding or Escaping of Output in Asset Metadata Component
High
CVE-2021-38623
Improper Resource Shutdown or Release in TYPO3 extension
Medium
CVE-2021-36785
Cross-site Scripting in TYPO3 extension
High
CVE-2021-32758
Layout XML Arbitrary Code Fix
High
CVE-2021-32759
Data Flow Sanitation Issue Fix
Medium
CVE-2021-38713
Cross-site scripting in imgURL
Critical
CVE-2021-25955
Dolibarr Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.