Medium
CVE-2021-43843
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Low
CVE-2021-43838
Regular Expression Denial of Service (ReDoS) in jsx-slack
Medium
CVE-2021-43812
Open redirect in @auth0/nextjs-auth0
Medium
CVE-2021-23562
Code injection in plupload
Medium
CVE-2021-46320
OpenZeppelin Contracts initializer reentrancy may lead to double initialization
High
CVE-2021-43801
Uncaught Exception in mercurius
Medium
CVE-2021-35513
Cross-site Scripting in Mermaid
Medium
CVE-2021-23400
Header injection in nodemailer
High
CVE-2021-23402
Prototype Pollution in record-like-deep-assign
High
CVE-2021-36716
Improper Input Validation in is-email
Medium
CVE-2020-11611
Open Redirect in xdLocalStorage
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
High
CVE-2021-43803
Unexpected server crash in Next.js.
Medium
CVE-2021-23673
Cross-site Scripting in pekeupload
Medium
CVE-2021-23718
Server-Side Request Forgery in ssrf-agent
Medium
CVE-2021-25987
Hexo Vulnerable to XSS
Critical
CVE-2021-43786
API token verification can be bypassed in NodeBB
Critical
CVE-2021-43787
XSS via prototype pollution in NodeBB
Medium
CVE-2021-43788
NodeBB vulnerable to path traversal in translator module
High
CVE-2021-40830
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40831
Improper certificate management in AWS IoT Device SDK v2
Critical
CVE-2021-23433
Prototype Pollution in algoliasearch-helper
High
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
High
CVE-2021-41164
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.