Medium
CVE-2021-25041
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-21294
Unbounded connection acceptance in http4s-blaze-server
High
CVE-2021-21293
Unbounded connection acceptance leads to file handle exhaustion
Medium
CVE-2021-23980
Cross-site scripting in Bleach
High
ghsa-x7p5-p2c9-phvg
Unexpected database bindings
High
CVE-2021-21317
Denial of Service in uap-core
Medium
CVE-2021-3281
Django Directory Traversal via archive.extract
High
CVE-2021-26754
wpDataTables (Premium) <= 3.4 - SQL Injection
Medium
CVE-2021-24152
Popup Builder <= 3.73 - Reflected Cross-Site Scripting
Critical
CVE-2021-24148
MStore API <= 3.1.9 - Authentication Bypass
Medium
CVE-2020-28493
Regular Expression Denial of Service (ReDoS) in Jinja2
High
CVE-2021-21277
Angular Expressions - Remote Code Execution
High
CVE-2021-23329
Prototype pollution in nested-object-assign
High
CVE-2021-24151
WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injection
Medium
6da0a85d-0c6f-40ae-8a3d-85222f0e7cc5
Ivory Search – WordPress Search Plugin <= 4.5.10 - Reflected Cross-Site Scripting
Medium
CVE-2021-21254
CKEditor 5 Markdown plugin Regular expression Denial of Service
High
CVE-2021-21316
Processing untrusted theming resources might execute arbitrary code (ACE)
Critical
ghsa-hhw9-35p2-q2c5
Steam Socialite Provider v1 does not correctly validate openid server
High
CVE-2021-3142
XSS in Mautic
Critical
CVE-2018-1285
XML External Entity attack in log4net
Critical
CVE-2021-3190
OS Command Injection in async-git
High
CVE-2021-3223
Path traversal in Node-RED-Dashboard
Medium
CVE-2021-21283
XSS in Flarum Sticky extension
Medium
ghsa-32wx-4gxx-h48f
Users can edit the tags of any discussion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.