Medium
CVE-2021-46320
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 764
Reset filters
Low
ghsa-wmpv-c2jp-j2xg
ERC1155Supply vulnerability in OpenZeppelin Contracts
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Critical
CVE-2021-41264
UUPSUpgradeable vulnerability in @openzeppelin/contracts
Critical
ghsa-q4h9-46xg-m3x9
UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
High
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
High
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Critical
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Critical
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Medium
CVE-2021-23414
Cross-site Scripting in video.js
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
High
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Medium
CVE-2021-29060
Regular Expression Denial of Service (ReDOS)
High
CVE-2021-23391
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
High
CVE-2021-29469
Node-Redis potential exponential regex in monitor mode
Medium
CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
Medium
ghsa-7wwv-vh3v-89cq
ReDOS vulnerabities: multiple grammars
Critical
ghsa-8qh7-xw58-3ww7
Malicious Package in radic-util
Critical
ghsa-2vqq-jgxx-fxjc
Malicious Package in motiv.scss
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.