Medium
CVE-2021-24414
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2023-23619
Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina
High
CVE-2020-26301
OS Command Injection in ssh2
Medium
CVE-2021-39339
Telefication <= 1.8.0 - Open Relay and Server-Side Request Forgery
Medium
CVE-2021-24544
Responsive WordPress Slider <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2021-24515
Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Stored Cross-Site Scripting
High
CVE-2021-24543
jQuery Reply to Comment <= 1.31 - Cross-Site Request Forgery
Medium
CVE-2021-24485
Special Text Boxes <= 5.9.109 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24563
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24487
St Daily Tip <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-24662
Game Server Status <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-42359
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2021-24489
Request a Quote <= 2.3.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24545
WP HTML Author Bio <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2021-40690
Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario
High
CVE-2021-39229
Apprise vulnerable to regex injection with IFTTT Plugin
High
CVE-2021-3803
Inefficient Regular Expression Complexity in nth-check
High
CVE-2021-3805
Prototype Pollution in object-path
High
CVE-2021-41079
Infinite loop in Tomcat due to parsing error
High
CVE-2020-21322
Arbitrary Code Execution in feehi/cms
High
CVE-2020-21122
Server-Side Request Forgery in UReport
Critical
CVE-2020-21125
Remote code execution in UReport
Medium
CVE-2021-3801
prismjs Regular Expression Denial of Service vulnerability
Medium
CVE-2020-1744
Exposure of Sensitive Information in keycloak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.