High
CVE-2021-25108
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-21663
WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection
High
CVE-2021-25095
IP2Location Country Blocker <= 2.26.4 - Subscriber+ Arbitrary Country Ban
Medium
CVE-2022-23979
Ultimate Reviews <= 3.0.15 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-25096
IP2Location Country Blocker <= 2.26.4 - Ban Bypass
High
CVE-2022-21664
WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query
Critical
CVE-2021-45459
Command Injection in node-windows
Medium
CVE-2021-4139
Cross-site Scripting in pimcore
High
CVE-2021-4131
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4132
livehelperchat is vulnerable to Cross-site Scripting
High
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-44145
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi
Unrated
drupal-contrib-2022-002
drupal/simple_oauth - SA-CONTRIB-2022-002
Unrated
drupal-contrib-2022-001
drupal/super_login - SA-CONTRIB-2022-001
High
CVE-2021-23797
Path Traversal in http-server-node
High
CVE-2021-23450
Prototype Pollution in dojo
Medium
CVE-2021-44116
Cross-site Scripting in Anchor CMS
Medium
CVE-2021-45452
Directory-traversal in Django
High
CVE-2021-45116
Information disclosure in Django
High
CVE-2021-45115
Denial-of-service in Django
Medium
CVE-2022-23179
Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24839
SupportCandy <= 2.2.4 - Unauthenticated Arbitrary Ticket Deletion
Medium
CVE-2021-25106
Privacy Policy Generator, Terms & Conditions Generator - WPLegalPages <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-24928
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.