High
CVE-2021-23426
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-30483
Directory Traversal in isomorphic-git
Critical
CVE-2021-23436
Prototype Pollution in immer
High
CVE-2021-39109
Path traversal in atlasboard
Critical
CVE-2021-38302
SQL injection in TYPO3 extension
Medium
CVE-2021-36793
CSRF token exposure in TYPO3 extension
Medium
CVE-2021-32822
Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor in hbs
High
CVE-2021-25956
Dolibarr vulnerable to Improper Authentication and Improper Access Control
High
CVE-2020-22345
OS Command Injection in Centreon
Medium
CVE-2021-23425
Uncontrolled Resource Consumption in trim-off-newlines
High
CVE-2021-23424
Uncontrolled Resource Consumption in ansi-html
High
CVE-2021-38556
Command Injection in RaspAP 2.6.6
High
CVE-2021-38557
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
Medium
CVE-2021-23429
Uncontrolled Resource Consumption in transpile
High
CVE-2021-23406
Code Injection in pac-resolver
High
CVE-2021-23430
Directory Traversal in startserver
Medium
CVE-2021-23432
Prototype Pollution in mootools
Medium
CVE-2021-23431
Cross-site Request Forgery (CSRF) in joplin
High
CVE-2021-25957
Weak Password Recovery Mechanism for Forgotten Password
Low
CVE-2021-32830
Command injection in @diez/generation
Medium
CVE-2021-3678
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
Critical
CVE-2021-39185
Default CORS config allows any origin with credentials
High
CVE-2021-39187
Parse Server crashes with query parameter
Medium
CVE-2021-24720
GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.