Critical
CVE-2020-13675
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2020-13674
Drupal core - SA-CORE-2021-007
Unrated
CVE-2020-13673
Drupal core - SA-CORE-2021-006
Medium
CVE-2021-36841
YITH Maintenance Mode <= 1.3.7 - Stored Cross-Site Scripting
Medium
CVE-2021-24732
PDF Flipbook, 3D Flipbook WordPress – DearFlip Lite <= 1.7.12 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24677
Find My Blocks < 3.4.0 - Sensitive Information Disclosure
Medium
CVE-2021-24743
Podcast Subscribe Buttons < 1.4.2 - Stored Cross-Site Scripting
Medium
9de09daa-a3e0-4563-bdc9-79cb5e4b039b
SEO Redirection Plugin – 301 Redirect Manager <= 7.8 - Cross-Site Request Forgery
Medium
CVE-2021-24734
Compact WP Audio Player <= 1.9.6 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24516
PlanSo Forms <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-24684
PDF Light Viewer <= 1.4.11 - Authenticated Command Injection
Medium
CVE-2021-24736
Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.56 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24735
Compact WP Audio Player <= 1.9.6 - Setting Change via Cross-Site Request Forgery
High
CVE-2021-3666
body-parser-xml vulnerable to Prototype Pollution
High
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
High
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Medium
CVE-2021-40823
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Critical
CVE-2021-3645
merge vulnerable to Prototype Pollution
High
CVE-2021-23440
Prototype Pollution in set-value
Critical
CVE-2021-40146
Remote Code Execution in Any23
Critical
CVE-2021-38555
XML Injection in Any23
High
CVE-2021-40839
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
Medium
CVE-2021-20792
Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting
Medium
CVE-2021-24656
Simple Social Media Share Buttons <= 3.2.3 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.