Medium
CVE-2021-3900
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Low
CVE-2021-3901
Cross-Site Request Forgery in firefly-iii
Medium
CVE-2020-22864
Cross site scripting in froala-editor
Critical
CVE-2021-41194
Improper Access Control in jupyterhub-firstuseauthenticator
Medium
CVE-2021-24749
URL Shortify <= 1.5.0 - Cross-Site Request Forgery
Medium
6e53e70f-45fc-41a6-8436-a8b14f7685d0
Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
40488ed8-ab4c-4ba6-821e-ed6d7a63e260
Hotel Listings < 1.3.3 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2021-4340
uListing <= 1.6.6 - Unauthenticated SQL Injection
Medium
CVE-2021-41188
Authenticated Stored XSS in shopware/shopware
Medium
CVE-2021-25977
Cross-site Scripting in PiranhaCMS
Critical
CVE-2021-40865
Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm
Critical
CVE-2021-38294
Command injection leading to Remote Code Execution in Apache Storm
Medium
CVE-2021-36843
Social Media Flying Icons | Floating Social Media Icon <= 4.3.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24917
WPS Hide Login <= 1.9.0 - Hidden Login Page Location Disclosure
Medium
CVE-2021-24876
Registrations for The Events Calendar <= 2.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Medium
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Medium
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
Critical
CVE-2021-41078
Nameko Arbitrary code execution due to YAML deserialization
Critical
CVE-2021-42343
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults
Medium
CVE-2021-24745
About Author Box < 1.0.2 - Cross-Site Scripting
High
CVE-2021-24889
Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection
Medium
CVE-2021-24842
Bulk Datetime Change <= 1.11 - Missing Authorisation
High
CVE-2021-39333
HashThemes Demo Importer <= 1.1.1 - Missing Authorization to Database Wipe
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.