High
CVE-2021-29479
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-29480
Ratpack's default client side session signing key is highly predictable
Medium
CVE-2021-29481
Unencrypted storage of client side sessions
High
CVE-2021-32736
Prototype Pollution in think-helper
Critical
CVE-2021-29485
Remote Code Execution Vulnerability in Session Storage
Medium
CVE-2021-35210
Cross site scripting in the system log
High
CVE-2020-36407
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
Medium
CVE-2021-24502
WP Google Map <= 1.7.6 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24467
Leaflet Map < 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-4366
PWA for WP & AMP < = 1.7.32 - Missing Authorization
Medium
CVE-2021-24468
Leaflet Map <= 2.23.3 - Contributor+ Stored Cross-Site Scripting
High
CVE-2021-4354
PWA for WP & AMP <= 1.7.32 - Arbitrary File Upload
High
CVE-2020-36049
Resource exhaustion in socket.io-parser
Unrated
drupal-contrib-2021-022
drupal/block_content_revision_ui - SA-CONTRIB-2021-022
Unrated
drupal-contrib-2021-021
drupal/linky_revision_ui - SA-CONTRIB-2021-021
Unrated
drupal-contrib-2021-020
drupal/apigee_edge - SA-CONTRIB-2021-020
High
CVE-2021-25951
XML2Dict XML Entity Expansion Vulnerability
High
eec21717-dffa-40c0-90c0-007b568609cc
SEO <= 4.0.2 - Cross-Site Request Forgery
High
e27825b9-c3ef-4740-bd19-7198c806c70b
intimate Payments Plugin <= 1.3.1 - Cross-Site Request Forgery
High
d18c17f1-7b85-46d6-a92e-948be98adf87
MZ MBO Access <= 2.0.8 - Cross-Site Request Forgery
High
cc886378-cebf-4c0b-a089-62e9469dd954
KONTXT Content Advisor <= 2.2 - Cross-Site Request Forgery
High
ca132d26-e927-41f1-be57-0c3bdeace2e6
Fontsampler <= 0.4.12 - Cross-Site Request Forgery to Cross-Site Scripting
High
c9f8e9b5-f4bf-48e3-b315-1b9b24be6e93
Journey Analytics <= 1.0.12 - Cross-Site Request Forgery
Medium
c881ddce-05f8-4b56-ac72-52c9b7773db0
WP Prayer <= 1.5.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.