High
CVE-2021-23326
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-3137
Cross Site Scripting (XSS) in XWiki
High
CVE-2020-8570
Path Traversal in the Java Kubernetes Client
Critical
ghsa-7xcv-wvr7-4h6p
Malicious npm package: an0n-chat-lib
Critical
ghsa-qv2g-99x4-45x6
Malicious npm package: discord-fix
Critical
ghsa-w8fh-pvq2-x8c4
Malicious npm package: sonatype
High
CVE-2021-24145
Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution
High
CVE-2021-24149
Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection
Medium
CVE-2021-24147
Modern Events Calendar Lite <= 5.16.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24146
Modern Events Calendar Lite <= 5.16.4 - Unauthenticated Events Export
Medium
CVE-2020-26272
IPC messages delivered to the wrong frame in Electron
Critical
CVE-2021-4381
uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
Critical
CVE-2021-24884
Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting
Medium
ec0fff2a-602d-441b-89d1-64d609a4abc0
Popup Builder <= 3.72 Missing Authorization on AJAX actions
Critical
CVE-2021-4370
uListing <= 1.6.6 - Missing Authorization
Critical
CVE-2021-4357
uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
Critical
575d1353-70af-4200-9088-662f7a052b76
Super Forms – Drag & Drop Form Builder <= 4.9.700 - Arbitrary File Upload
Medium
CVE-2021-4345
uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Critical
CVE-2021-4346
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Critical
CVE-2021-4343
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
Critical
CVE-2021-4341
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
High
CVE-2021-4339
uListing <= 1.6.6 - Unauthenticated Information Disclosure
Unrated
drupal-contrib-2021-003
drupal/subgroup - SA-CONTRIB-2021-003
Critical
CVE-2021-3120
YITH WooCommerce Gift Cards Premium <= 3.3.0 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.