Medium
86c3ef76-d4d0-4106-850f-88e9ea176979
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-24692
Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download
High
67ae29ee-ec3d-41d2-8691-ba1c615d243d
Meow Gallery (+ Gallery Block) <= 4.1.9 - Missing Authorization to Arbitrary Options Update
High
CVE-2021-24465
Meow Gallery (+ Gallery Block) <= 4.1.8 - SQL Injection
Low
CVE-2021-27913
Use of a Broken or Risky Cryptographic Algorithm
Medium
CVE-2021-27909
XSS vulnerability on password reset page
High
CVE-2021-27910
Stored XSS vulnerability on Bounce Management Callback
High
CVE-2021-27911
XSS vulnerability on contacts view
High
CVE-2021-27912
XSS vulnerability on asset view
Medium
CVE-2021-23434
Prototype Pollution in object-path
Medium
CVE-2021-36787
Cross-site Scripting in the femanager TYPO3 extension
Medium
CVE-2021-36788
Cross-site Scripting in the yoast_seo TYPO3 extension
High
CVE-2021-36786
Sensitive Data Exposure in miniorange_saml
Critical
CVE-2021-23420
Deserialization of Untrusted Data in codeception/codeception
Critical
CVE-2021-23421
Prototype Pollution in merge-change
High
CVE-2021-3689
Use of Insufficiently Random Values in yiisoft/yii2-dev
Medium
CVE-2021-3692
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
Critical
CVE-2021-38384
Incorrect Authorization in serverless-offline
Medium
CVE-2021-23419
Prototype Pollution in open-graph
Medium
CVE-2020-22392
Cross Site Scripting in Subrion CMS
High
CVE-2021-36804
Malicious password-reset in Akaunting
Critical
CVE-2021-34371
Deserialization of Untrusted Data in Neo4j
Medium
CVE-2021-3680
Inadequate Encryption Strength in showdoc
Critical
CVE-2019-19208
Code injection in codiad
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.