Medium
CVE-2021-24781
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
48b4214f-b722-405e-9bb7-a1faa68f0429
Cardinity Payment Gateway for WooCommerce <= 3.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24539
Coming Soon, Under Construction & Maintenance Mode By Dazzler <= 1.6.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-39347
Stripe for WooCommerce 3.0.0 - 3.3.9 - Missing Authorization Controls to Financial Account Hijacking
Medium
CVE-2021-36869
Ivory Search <= 4.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-25959
Cross-site Scripting in OpenCRX
High
CVE-2020-20693
Cross-Site Request Forgery in GilaCMS
Medium
CVE-2020-20696
Cross-site Scripting in GilaCMS
Medium
CVE-2020-20695
Cross-site Scripting in GilaCMS
Critical
CVE-2020-20120
SQL Injection in topthink/thinkphp
High
CVE-2021-23446
Inefficient Regular Expression Complexity in handsontable
High
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Medium
CVE-2021-25963
Cross-site Scripting in shuup
Critical
3e1f64f5-090a-4961-8490-d34f458a8d44
JS Job Manager < 1.1.9 - Arbitrary Plugin Installation/Activation
Medium
CVE-2021-41580
Improper Access Control in passport-oauth2
Critical
CVE-2021-38299
Improper Access Control in Webauthn Framework
Medium
CVE-2021-3822
Regular Expression Denial of Service in jsoneditor
Medium
CVE-2021-3818
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
Medium
CVE-2021-3819
Cross-Site Request Forgery in firefly-iii
High
CVE-2021-3820
inflect vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2021-23445
Cross site scripting in datatables.net
Medium
CVE-2021-41106
File reference keys leads to incorrect hashes on HMAC algorithms
High
ghsa-36mj-6r7r-mqhf
User can obtain JWT token even if account is disabled
Medium
CVE-2021-39342
Credova_Financial <= 1.4.8 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.