High
CVE-2021-24198
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24200
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via length Parameter
High
CVE-2021-24197
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Permission Takeover
High
CVE-2021-24209
WP Super Cache <= 1.7.1 - Authenticated (Admin+) Remote Code Execution
High
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
Medium
CVE-2021-28363
Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection
High
CVE-2021-24186
Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
High
CVE-2021-24182
Tutor LMS <=1.8.2 - SQL Injection via tutor_quiz_builder_get_answers_by_question
Medium
CVE-2021-24181
Tutor LMS – eLearning and online course solution <= 1.7.6 - SQL Injection
Medium
CVE-2021-24185
Tutor LMS – eLearning and online course solution <=1.7.6 - SQL Injection
Medium
CVE-2021-24183
Tutor LMS <= 1.8.2 - SQL Injection via tutor_quiz_builder_get_question_form
High
CVE-2021-24184
Tutor LMS – eLearning and online course solution <= 1.7.6 - Unprotected AJAX including Privilege Escalation
Medium
CVE-2021-24180
Related Posts for WordPress <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24196
Social Slider Widget <= 1.8.4 - Reflected Cross-Site Scripting
High
CVE-2021-24173
VM Backups <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2021-24172
VM Backups <= 1.0 - Cross-Site Request Forgery
Medium
ghsa-pjj4-jjgc-h3r8
Authenticated remote code execution
Low
CVE-2021-32710
Potential Session Hijacking
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
High
CVE-2021-23352
Madge vulnerable to command injection
Critical
ghsa-4wv4-mgfq-598v
Code injection in nobelprizeparser
Medium
CVE-2021-21368
Prototype poisoning
Medium
CVE-2021-21366
Misinterpretation of malicious XML input
Medium
ghsa-xmh9-rg6f-j3mr
Verification flaw in Solid identity-token-verifier
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.