High
CVE-2021-44144
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2021-43560
Moodle Insecure direct object reference (IDOR) in a calendar web service
High
CVE-2021-42250
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
Medium
CVE-2021-43576
XXE vulnerability in Jenkins pom2config Plugin
Medium
CVE-2021-21700
Stored XSS vulnerability in Jenkins Scriptler Plugin
Medium
CVE-2021-21701
XXE vulnerability in Jenkins Performance Plugin
Medium
CVE-2021-21699
Stored XSS vulnerability in Jenkins Active Choices Plugin
High
CVE-2021-43577
XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
High
CVE-2021-43578
Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
High
CVE-2021-41972
Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.
Critical
CVE-2021-33816
Dolibarr remote PHP code execution
Medium
CVE-2021-33618
Dolibarr ERP and CRM contain XSS Vulnerability
High
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
Critical
CVE-2021-21686
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21685
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21689
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21690
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21692
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21693
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21694
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21688
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21691
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21687
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
High
CVE-2021-21696
Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.