Medium
CVE-2021-36793
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filters
High
CVE-2021-25956
Dolibarr vulnerable to Improper Authentication and Improper Access Control
High
CVE-2021-25957
Weak Password Recovery Mechanism for Forgotten Password
Low
CVE-2021-27913
Use of a Broken or Risky Cryptographic Algorithm
Medium
CVE-2021-27909
XSS vulnerability on password reset page
High
CVE-2021-27910
Stored XSS vulnerability on Bounce Management Callback
High
CVE-2021-27911
XSS vulnerability on contacts view
High
CVE-2021-27912
XSS vulnerability on asset view
Medium
CVE-2021-36788
Cross-site Scripting in the yoast_seo TYPO3 extension
High
CVE-2021-36804
Malicious password-reset in Akaunting
Critical
CVE-2021-25955
Dolibarr Cross-site Scripting vulnerability
High
CVE-2021-39136
Cross-site scripting vulnerability in file upload
Medium
CVE-2021-37709
Insecure direct object reference of log files of the Import/Export feature
High
CVE-2021-37708
Command injection in mail agent settings
Medium
CVE-2021-37707
Manipulation of product reviews via API
High
CVE-2021-29487
October CMS auth bypass and account takeover
Medium
CVE-2021-37704
Exposed phpinfo() leadked via documentation files
High
Exploited in attacks
CVE-2021-32648
Account Takeover in Octobercms
High
CVE-2021-39165
Unauthenticated SQL Injection in Cachet
High
CVE-2021-39174
Cachet configuration leak
High
CVE-2021-39173
Cachet vulnerable to forced reinstall
High
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
Medium
CVE-2021-35955
Cross site scripting via HTML attributes in the back end
Unrated
drupal-contrib-2021-025
drupal/admin_toolbar - SA-CONTRIB-2021-025
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.