High
CVE-2018-14550
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
ceef080c-3d3b-494d-8cfa-fe9724b9207f
SecuPress Free and SecuPress Pro <= 1.4.12 - Unauthenticated Arbitrary IP Ban
Medium
CVE-2021-28957
lxml vulnerable to Cross-Site Scripting
Critical
CVE-2021-24212
WooCommerce Help Scout <= 2.9.1 - Arbitrary File Upload to Remote Code Execution
Medium
CVE-2021-24320
Directory & Listing < 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-4392
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24238
Realteo < 1.2.4 - Missing Authorization
Critical
CVE-2021-23344
total.js Remote Code Execution Vulnerability
High
CVE-2021-28092
Regular Expression Denial of Service (ReDoS)
High
CVE-2021-27290
Regular Expression Denial of Service (ReDoS)
High
CVE-2021-23354
printf vulnerable to Regular Expression Denial of Service (ReDoS)
Critical
CVE-2020-7785
Command injection in node-ps
High
CVE-2020-28426
Command injection in kill-process-on-port
Critical
CVE-2021-23355
Command Injection in ps-kill
Critical
CVE-2021-23356
Code injection in kill-process-by-name
Critical
CVE-2021-25914
Prototype Pollution Vulnerability in object-collider
Critical
CVE-2020-28273
Prototype pollution in set-in
High
CVE-2021-21267
Regular Expression Denial-of-Service in npm schema-inspector
High
CVE-2021-25329
Potential remote code execution in Apache Tomcat
High
CVE-2021-46875
Cross-site scripting in eZ Platform Kernel
High
CVE-2021-25293
Out of bounds read in Pillow
Medium
CVE-2021-25292
Regular Expression Denial of Service (ReDoS) in Pillow
High
CVE-2021-25291
Out of bounds read in Pillow
High
CVE-2021-25290
Out-of-bounds Write in Pillow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.