Unrated
drupal-contrib-2021-018
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filters
High
CVE-2020-13252
Command Injection in Centreon
High
CVE-2021-3603
PHPMailer untrusted code may be run from an overridden address validator
High
CVE-2021-34551
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
Medium
CVE-2021-32245
Cross-site scripting in PageKit
Medium
CVE-2021-32697
Form validation can be skipped
Medium
CVE-2021-32693
Authentication granted to all firewalls instead of just one
Critical
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
Unrated
drupal-contrib-2021-017
drupal/block_content_revision_ui - SA-CONTRIB-2021-017
Unrated
drupal-contrib-2021-016
drupal/linky_revision_ui - SA-CONTRIB-2021-016
High
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Medium
CVE-2021-27672
SQL Injection in tribalsystems/zenario
Critical
CVE-2021-3007
Remote code execution in zendframework and laminas-http
Critical
CVE-2021-32671
XSS vulnerability with translator
Unrated
drupal-contrib-2021-014
drupal/openid_connect - SA-CONTRIB-2021-014
High
CVE-2021-33563
Improper rate limiting in Koel
Medium
CVE-2021-33829
Drupal core - SA-CORE-2021-003
Medium
CVE-2020-12699
Open redirect in direct_mail
Medium
CVE-2020-12697
Denial of service in direct_mail
Critical
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Low
ghsa-g2qj-pmxm-9f8f
User enumeration in authentication mechanisms
Low
ghsa-2frx-j9hj-6c65
User enumeration in authentication mechanisms
Medium
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security
Unrated
drupal-contrib-2021-008
drupal/facets - SA-CONTRIB-2021-008
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.