High
CVE-2021-23937
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2021-21660
XSS vulnerability in Jenkins Markdown Formatter Plugin
High
CVE-2021-21657
XXE vulnerability in Jenkins Filesystem Trigger Plugin
High
CVE-2021-21659
XXE vulnerability in Jenkins URLTrigger Plugin
Medium
CVE-2021-25934
OpenNMS Horizon vulnerable to XSS
Critical
CVE-2021-25944
deep-defaults vulnerable to prototype pollution
Medium
CVE-2021-3313
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when
Medium
CVE-2021-29048
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page
Medium
CVE-2021-29043
Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password
High
CVE-2021-29053
Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections
Medium
CVE-2021-29046
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter
Medium
CVE-2021-29045
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
Medium
CVE-2021-29044
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page
Medium
CVE-2021-29051
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Medium
CVE-2021-29052
Liferay Portal and Liferay DXP Fails to Check Permissions
Medium
CVE-2021-29040
Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages
Medium
CVE-2021-29039
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page
High
CVE-2021-29047
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Medium
CVE-2021-29041
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module
Medium
CVE-2021-20331
MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener
Medium
CVE-2021-20250
JBoss EJB Client information disclosure vulnerability
Medium
CVE-2021-22137
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2021-32560
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
Medium
CVE-2021-32561
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.