Medium
CVE-2021-24802
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2021-24867
AccessPress Anonymous Post = 2.8.0 - Backdoored
Critical
CVE-2019-10061
OS Command Injection in node-opencv
Medium
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Medium
CVE-2021-28661
SilverStripe GraphQL Server permission checker not inherited by query subclass.
High
CVE-2021-40978
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in h
Medium
CVE-2021-36150
Cross-site Scripting in SilverStripe Framework
High
CVE-2021-22958
Server-Side Request Forgery vulnerability in concrete5
Critical
CVE-2021-23448
Prototype Pollution in config-handler
Medium
CVE-2021-25738
Code injection in Kubernetes Java Client
Medium
CVE-2021-41355
Credential Disclosure in System.DirectoryServices.Protocols
Medium
CVE-2021-3312
XML External Entity Reference in org.opencms:opencms-core
Medium
CVE-2020-29204
Cross-site Scripting in XXL-JOB
Critical
CVE-2020-28270
Prototype pollution in object-hierarchy-access
Medium
CVE-2021-42112
Cross-site Scripting in Limesurvey
Critical
CVE-2019-18413
SQL Injection and Cross-site Scripting in class-validator
Critical
CVE-2019-10762
SQL Injection in medoo
Medium
CVE-2019-20455
Improper Certificate Validation in Heartland & Global Payments PHP SDK
High
CVE-2020-8818
Origin Validation Error in Magento 2
Critical
CVE-2020-13909
Critical severity vulnerability in Ignition
Critical
CVE-2020-28274
Prototype pollution vulnerability in 'deepref'
Critical
CVE-2020-28280
Prototype pollution vulnerability in 'predefine'
Critical
CVE-2020-28283
Prototype pollution vulnerability in 'libnested'
Critical
CVE-2020-28282
Prototype pollution in getobject
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.