Medium
CVE-2021-24941
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
High
CVE-2022-0889
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
High
CVE-2020-21176
SQL Injection in thinkjs
Critical
CVE-2021-41868
Remote unauthenticated attackers able to upload files in Onionshare
Medium
CVE-2020-29457
Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core
Medium
CVE-2021-39198
The disqualify lead action may be executed without CSRF token check
Critical
CVE-2021-43996
Incorrect Access Control in Ignition
Critical
CVE-2021-3918
json-schema is vulnerable to Prototype Pollution
Medium
ghsa-xx4c-jj58-r7x6
Inefficient Regular Expression Complexity in Validator.js
High
CVE-2020-36186
Unsafe Deserialization in jackson-databind
High
CVE-2021-3950
Cross-site Scripting in django-helpdesk
Medium
5de937cc-da05-4b95-807d-dc19a8b7d6b0
Child Theme Generator <= 2.2.7 Cross-Site Request Forgery to Arbitrary Folder Deletion
High
CVE-2021-39353
Easy Registration Forms <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-42363
Preview E-Mails for WooCommerce <= 1.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-41273
Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
Medium
98be1eb8-ee7d-4a39-b70f-5037b651ba96
Pixel Cat – Conversion Pixel Manager <= 2.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24982
Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting
High
3c476263-72b7-48f1-8ba3-91d69eae7b6a
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection
High
CVE-2021-25976
Cross-Site Request Forgery in PiranhaCMS
Critical
CVE-2021-37580
Improper Authentication in Apache ShenYu Admin
High
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
High
CVE-2021-41164
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
Unrated
drupal-core-2021-011
Drupal core - SA-CORE-2021-011
Unrated
drupal-contrib-2021-044
drupal/openid_connect_windows_aad - SA-CONTRIB-2021-044
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.