High
CVE-2021-21422
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2021-23396
Prototype Pollution in lutils
Medium
CVE-2021-32684
Missing Handler in @scandipwa/magento-scripts
Medium
CVE-2021-32659
Automatic room upgrade handling can be used maliciously to bridge a room non-consentually
High
CVE-2021-32691
Auto-merging Person Records Compromised
Medium
CVE-2021-23387
Open Redirect in trailing-slash
Medium
CVE-2021-23388
Regular expression denial of service in forms
Critical
CVE-2021-26707
Prototype pollution in Merge-deep
High
CVE-2020-28469
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
High
CVE-2021-32641
Reflected XSS when using flashMessages or languageDictionary
Medium
CVE-2021-32662
Path traversal
Medium
ghsa-h45p-w933-jxh3
Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript
Medium
ghsa-5vm8-hhgr-jcjp
Cross-site scripting vulnerability in TinyMCE
High
ghsa-4g53-vp7q-gfjv
constructEvent does not verify header
Low
ghsa-jcgr-9698-82jx
Improper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/build
High
CVE-2021-32624
Private Field data leak
Medium
CVE-2021-33829
Drupal core - SA-CORE-2021-003
Medium
CVE-2020-7639
eivindfjeldstad-dot contains prototype pollution vulnerability
High
CVE-2021-23386
Potential memory exposure in dns-packet
Medium
CVE-2020-7680
Cross-site Scripting in docsify
Medium
CVE-2020-15500
Cross-site scripting in TileServer GL
Medium
CVE-2021-32817
Insecure template handling in express-hbs
High
CVE-2021-32818
Insecure template handling in haml-coffee
High
CVE-2021-32819
Insecure template handling in Squirrelly
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.