Low
CVE-2021-28163
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-28164
Authorization Before Parsing and Canonicalization in jetty
High
CVE-2021-21388
Command Injection Vulnerability in systeminformation
High
CVE-2021-21421
ApiKey secret could be revelated on network issue
Medium
CVE-2021-21391
Regular expression Denial of Service in multiple packages
High
CVE-2021-21414
Command injection vulnerability in @prisma/sdk in getPackedPackage function
Medium
CVE-2021-23348
Arbitrary Command Injection in portprocesses
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
High
CVE-2021-21413
Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate
Medium
CVE-2021-21412
[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values
Low
CVE-2024-23688
Discovery uses the same AES/GCM Nonce throughout the session
Medium
CVE-2021-27908
Mautic vulnerable to secret data exfiltration via symfony parameters
Medium
CVE-2021-28658
Directory Traversal in Django
High
7193b373-a0c9-4cd7-8a53-4f35ceff8f23
Alkubot – Gamify discounts, sell more and give less at the right time < 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2021-24244
WPBakery Page Builder Clipboard < 4.5.8 - Arbitrary License Options Update
Medium
CVE-2021-24242
Tutor LMS <= 1.8.7 - Authenticated Local File Inclusion
High
1664fef3-6416-4678-9ee7-bed2184d7490
Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections
Medium
CVE-2021-24239
Pie Register – User Registration Forms <= 3.7.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24243
WPBakery Page Builder Clipboard <= 4.5.5 - Stored Cross-Site Scripting
Critical
CVE-2021-24240
Business Hours Pro <= 5.5.0 - Arbitrary File Upload
Low
CVE-2021-21416
Potential sensitive information disclosed in error reports
High
CVE-2021-29421
Improper Restriction of XML External Entity Reference in pikepdf
Unrated
CVE-2021-3447
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.