Medium
ghsa-243q-g9j3-qf6r
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-32716
Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2021-32717
Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2021-21422
Cross-site scripting
Critical
CVE-2021-32685
Improper Verification of Cryptographic Signature
Medium
CVE-2021-32709
Missing Authentication for Critical Function
Medium
ghsa-wq3r-jwrq-xg6w
Canceling of orders not related to the logged-in user
Low
CVE-2021-33604
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
Medium
CVE-2021-31412
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Low
ghsa-8vfw-v2jv-9hwc
Reflected cross-site scripting in development mode handler in Vaadin
High
CVE-2021-32702
Reflected XSS from the callback handler's error query parameter
High
CVE-2020-12642
XXE vulnerability in Launch import
High
CVE-2021-29620
XXE vulnerability on Launch import with externally-defined DTD file
Medium
CVE-2021-24479
DrawBlog <= 0.90 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24452
W3 Total Cache <= 2.1.4 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24477
Migrate Users <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Medium
CVE-2021-24436
W3 Total Cache <= 2.1.3 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24476
Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24480
Event Geek <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-24472
QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File Inclusion
Medium
CVE-2021-24464
YouTube Embed, Playlist and Popup <= 2.3.8 - Contributor+ Stored Cross-Site Scripting
Critical
CVE-2021-34621
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24455
Tutor LMS <= 1.9.1 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.