Medium
CVE-2021-36884
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
3b8ea0b1-5050-43fc-8b80-b6a501a607fe
Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.1 - Reflected Cross-Site Scripting
High
CVE-2020-28472
Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader
Critical
CVE-2021-43608
DBAL 3 SQL Injection Security Vulnerability
Medium
CVE-2021-41258
Cross-site scripting (XSS) from image block content in the site frontend
Medium
CVE-2021-41252
Cross-site scripting (XSS) from writer field content in the site frontend
High
CVE-2021-20846
Push Notifications for WordPress (Lite) < 6.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-24828
Mortgage Calculator / Loan Calculator < 1.5.17 - Cross-Site Scripting
High
CVE-2021-24981
Directorist <= 7.0.6.1 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2021-24578
SportsPress <= 2.7.8 - Reflected Cross-Site Scripting
Critical
CVE-2021-4455
Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload
Low
ghsa-wmpv-c2jp-j2xg
ERC1155Supply vulnerability in OpenZeppelin Contracts
Critical
CVE-2021-41269
Critical vulnerability found in cron-utils
Low
CVE-2021-3938
snipe-it is vulnerable to Cross-site Scripting
Medium
CVE-2021-3932
twill is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
High
CVE-2021-3915
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
Medium
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-41038
Improper Verification of Communication Channel in @theia/plugin-ext
Medium
CVE-2021-43561
Cross-site Scripting in pegasus/google-for-jobs
High
CVE-2021-43564
Unrestricted access to predictable file paths in hov/jobfair
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.