Critical
CVE-2021-41132
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-39334
Job Board Vanila Plugin <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-39332
Business Manager <= 1.4.5 - Stored Cross-Site Scripting
Medium
CVE-2021-39335
WpGenius Job Listing <= 1.0.2 - Stored Cross-Site Scripting
Medium
CVE-2021-39344
KJM Admin Notices <= 2.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-39336
Job Manager <= 0.7.25 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-39345
HAL <= 2.1.1 Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-39338
MyBB Cross-Poster <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-39337
job-portal <= 0.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24869
WP Fastest Cache < 0.9.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2021-24870
WP Fastest Cache < 0.9.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-39349
Author Bio Box <= 3.3.1 - Authenticated Stored Cross-Site Scripting
Medium
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
High
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
ghsa-j23j-q57m-63v3
Denial of service in DataCommunicator class in Vaadin 8
Medium
CVE-2021-33609
Denial of service in DataCommunicator class in Vaadin 8
Unrated
drupal-contrib-2021-043
drupal/loft_data_grids - SA-CONTRIB-2021-043
Medium
CVE-2021-26272
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
Critical
CVE-2021-25916
Prototype pollution vulnerability in 'patchmerge'
High
CVE-2021-38346
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal
High
CVE-2021-24998
Simple JWT Login <= 3.2.1 - Insecure Password Creation
High
CVE-2021-24864
WP Cloudy <= 4.4.9 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24598
Testimonial < 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-38344
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.