High
CVE-2021-0341
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2020-7021
Insertion of Sensitive Information into Log File in Elasticsearch
Medium
CVE-2020-29582
Incorrect Default Permissions in JetBrains Kotlin
Medium
CVE-2020-29605
MantisBT Incorrect Authorization in bug_actiongroup_page.php
Medium
CVE-2020-29604
MantisBT Missing Authorization access check in bug_actiongroup.php
Medium
CVE-2020-29603
MantisBT Insecure Storage in manage_proj_edit_page.php
Medium
CVE-2021-20185
Moodle Client side denial of service via personal message
High
CVE-2021-20187
Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration
Medium
CVE-2021-20184
Moodle Grade information disclosure in grade's external fetch functions
Medium
CVE-2021-20186
Moodle Cross-site Scripting
Medium
CVE-2021-20183
Moodle Vulnerable to Reflected Cross-site Scripting
High
CVE-2020-23355
Codiad Vulnerable to PHP Magic Hash Vulnerability
High
CVE-2021-3291
Zen Cart vulnerable to authenticated remote code execution
Medium
CVE-2021-26271
CKEditor 4 ReDoS Vulnerability
Medium
CVE-2021-21615
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
High
CVE-2020-35239
CakePHP allows method override parameters to bypass CSRF checks
Medium
CVE-2020-21146
Feehi CMS vulnerable to Cross-site Scripting in Username Field
High
CVE-2020-22643
Feehi CMS arbitrary file upload vulnerability
Medium
CVE-2020-27852
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature
Medium
CVE-2020-27851
Gravity Forms stored HTML injection vulnerability
Medium
CVE-2020-27850
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability
Critical
CVE-2020-35128
Mautic stored Cross-site Scripting (XSS)
Medium
CVE-2021-21613
XSS vulnerability in Jenkins TICS Plugin
Medium
CVE-2021-21607
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.