Medium
a0297cab-8b6f-4e09-b552-4772c6f72c04
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
765df8f4-438c-41b6-ac74-494f1b74cf33
Cookiebot | GDPR/CCPA Compliant Cookie Consent and Control <= 3.6.0 - Reflected Cross-Site Scripting
Medium
4625d217-99d4-47d8-b093-fe55a3018348
Sticky Menu & Sticky Header <= 2.20 - Reflected Cross-Site Scripting
Medium
1f092dae-e298-42e3-b494-fc7b7669b300
All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24133
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery
High
CVE-2021-24141
Advanced Database Cleaner <= 3.0.1 - SQL injection
Medium
CVE-2020-36750
EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24134
Constant Contact Forms <= 1.8.7 Editor+ Stored Cross-Site Scripting
Medium
CVE-2020-36831
NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization
High
CVE-2019-20916
Path Traversal in pip
Low
ghsa-vpgc-7h78-gx8f
personnummer/js vulnerable to Improper Input Validation
High
ghsa-5vj8-3v2h-h38v
Remote Code Execution in next
High
CVE-2020-36649
Regular Expression Denial of Service in papaparse
High
CVE-2020-13110
DLL Injection in kerberos
Medium
CVE-2020-7608
yargs-parser Vulnerable to Prototype Pollution
High
ghsa-6x33-pw7p-hmpq
Denial of Service in http-proxy
High
ghsa-rhc3-76jw-4f2x
Denial of Service in @commercial/ammo
Critical
CVE-2019-0219
Privilege Escalation in cordova-plugin-inappbrowser
Low
ghsa-22h7-7wwg-qmgg
Prototype Pollution in @hapi/hoek
High
ghsa-5ff8-jcf9-fw62
Cross-Site Scripting in markdown-it-katex
Critical
ghsa-rjvj-673q-4hfw
Command Injection in traceroute
Critical
ghsa-vjvw-wcmw-pr26
Insufficient Entropy in parsel
Critical
ghsa-wqgx-4q47-j2w5
Insecure Cryptography Algorithm in parsel
High
ghsa-q643-w9jp-q2qg
Hardcoded Initialization Vector in parsel
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.