High
CVE-2021-4355
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-34660
WP Fusion Lite <= 3.37.18 – Reflected Cross-Site Scripting
High
CVE-2021-24728
Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection
Medium
CVE-2021-24591
Highlight < 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
ghsa-hxwm-x553-x359
Arbitrary Command Injection due to Improper Command Sanitization
Medium
CVE-2021-32807
The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the c
High
CVE-2021-32811
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope
High
CVE-2021-48018
Storage corruption due to variables overwritten by re-entrancy locks
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Medium
CVE-2021-24609
Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting
High
b15b10a4-04fd-4860-9cc9-cefcdbbbf507
User Rights Access Manager <= 1.0.7 - Access Restriction Bypass
High
CVE-2019-0820
Regular Expression Denial of Service in System.Text.RegularExpressions
High
CVE-2021-24606
Availability Calendar < 1.2.1 - SQL Injection
Medium
58b8e6f5-5cf8-4dbb-89e9-69266bdc1a30
WP Customize Login <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
High
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Medium
CVE-2021-32796
Misinterpretation of malicious XML input
High
ghsa-6cj2-92m5-7mvp
Improperly Controlled Modification of Object Prototype Attributes
Medium
CVE-2021-24604
Availability Calendar <= 1.2.1 - Stored Cross-Site Scripting
High
CVE-2021-32806
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Medium
CVE-2020-9472
Unrestricted Upload of File with Dangerous Type in Umbraco CMS
Medium
CVE-2020-8867
Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
High
CVE-2021-23407
Path Traversal in elFinder.Net.Core
High
CVE-2020-1180
Remote code execution in ChakraCore
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.