Critical
CVE-2021-36040
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2021-36038
Magento discloses sensitive information via the Multishipping Module
Medium
CVE-2021-36037
Magento is affected by an improper authorization vulnerability
High
CVE-2021-36044
Magento affected by a server-side denial-of-service using a GraphQL field
High
CVE-2021-21678
Jenkins SAML Plugin allows bypassing CSRF protection for any URL
High
CVE-2021-21677
RCE vulnerability in Jenkins Code Coverage API Plugin
High
CVE-2021-21679
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
Medium
CVE-2021-21681
Password stored in plain text by Jenkins Nomad Plugin
High
CVE-2021-21680
XXE vulnerability in Jenkins Nested View Plugin
High
CVE-2021-40085
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.
High
CVE-2021-38598
OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca
High
CVE-2021-28490
Cross-Site Request Forgery in OWASP CSRFGuard
Critical
CVE-2020-28088
Jeecg-Boot CMS arbitrary file upload vulnerability
Critical
CVE-2021-38148
Obsidian does not require user confirmation for non-http/https URLs.
Medium
CVE-2020-22330
Subrion Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2021-3642
Observable Discrepancy in Wildfly Elytron
High
CVE-2021-33335
Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers
High
CVE-2021-33338
Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
Medium
CVE-2021-33339
Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting
Medium
CVE-2021-33336
Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-35463
Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module
Medium
CVE-2021-33337
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module
Medium
CVE-2021-37916
Joplin vulnerable to Cross-site Scripting in notes
Medium
CVE-2021-33326
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.