Medium
CVE-2021-33851
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Critical
CVE-2021-41243
OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS
High
CVE-2021-41279
Potential Zip Slip Vulnerability in baserCMS
High
CVE-2021-43776
Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend
High
ghsa-2g8g-63j4-9w3r
RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend
High
CVE-2021-43785
Cross-Site Scripting Vulnerability in @joeattardi/emoji-button
High
CVE-2021-43783
Path Traversal in @backstage/plugin-scaffolder-backend
Medium
ghsa-9jp8-cwwx-p64q
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext
Medium
ghsa-fxwm-rx68-p5vx
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext
Medium
CVE-2021-25987
Hexo Vulnerable to XSS
Medium
CVE-2021-4026
bookstack is vulnerable to Improper Access Control
Medium
CVE-2021-25967
Cross-site Scripting in CKAN
High
CVE-2021-3994
django-helpdesk is vulnerable to Cross-site Scripting
Medium
CVE-2021-22095
Deserialization of Untrusted Data in Spring AMQP
Medium
CVE-2021-25021
OMGF <= 4.5.11 - Authenticated (Admin+) Arbitrary Folder Deletion via Path Traversal
Medium
CVE-2021-42367
Variation Swatches for WooCommerce <= 2.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2021-25000
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in General Module
Medium
CVE-2021-24680
WP Travel Engine <= 5.3.0 - Editor+ Stored Cross-Site Scripting
Medium
CVE-2021-24999
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in PDF Invoicing Module
Medium
CVE-2021-25001
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in Product XML Feeds Module
Medium
CVE-2021-25020
CAOS <= 4.1.8 - Admin+ Arbitrary Folder Deletion via Path Traversal
Critical
CVE-2021-43786
API token verification can be bypassed in NodeBB
Critical
CVE-2021-43787
XSS via prototype pollution in NodeBB
Medium
CVE-2021-43788
NodeBB vulnerable to path traversal in translator module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.