Medium
CVE-2021-24661
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-24660
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
Medium
CVE-2021-24659
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2021-39159
remote code execution via git repo provider
High
CVE-2021-39160
Code injection in nbgitpuller
Unrated
drupal-contrib-2021-026
drupal/webform - SA-CONTRIB-2021-026
Medium
CVE-2021-3728
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3730
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3729
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Critical
CVE-2020-36474
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
High
CVE-2021-39139
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-39140
XStream can cause a Denial of Service
High
CVE-2021-39141
XStream is vulnerable to an Arbitrary Code Execution attack
High
Exploited in attacks
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-39145
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39146
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39147
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39148
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39149
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39150
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39151
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39152
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39153
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39154
XStream is vulnerable to an Arbitrary Code Execution attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.