Critical
ghsa-g2q5-5433-rhrf
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
ghsa-73qr-pfmq-6rp8
Embedded malware in coa
High
CVE-2020-10378
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Medium
CVE-2021-3765
Inefficient Regular Expression Complexity in validator.js
Medium
CVE-2021-33611
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
High
CVE-2021-41238
Missing Authorization with Default Settings in Dashboard UI
Medium
CVE-2021-41973
Infinite loop in Apache MINA
High
CVE-2021-27644
SQL injection in Apache DolphinScheduler
High
CVE-2020-11476
Unrestricted Uploads in Concrete5
Medium
ef7ef45a-612b-40ca-817d-05b3d29b2b05
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization
High
c70ed02e-1183-475b-a110-4a2d8dbe610e
Nitro by WooRockets <= 1.7.9 - Missing Authorization to Arbitrary Plugin Installation
Medium
c63079af-6a22-4692-ab81-96e166a00c38
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change
Medium
CVE-2022-0142
Visual Form Builder <= 3.0.5 - CSV Injection
Medium
CVE-2021-24935
WP Google Fonts <= 3.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-0140
Visual Form Builder <= 3.0.5 - Unauthenticated Information Disclosure
Medium
1dc733ec-6cc8-40fc-b4c4-1fad4bcd9f21
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Critical
CVE-2020-36378
Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36379
Vulnerability in remove function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36377
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36376
Vulnerability in list function leads to arbitrary code execution via filePath parameters
Medium
CVE-2021-24714
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
Medium
35b9f37c-69e1-437a-97dd-3d3e7a8cd86e
Ivory Search <= 4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24718
Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder < 1.5 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.