Medium
CVE-2021-21029
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Critical
CVE-2021-21024
Magento Blind SQL Injection in the Search module
Critical
CVE-2021-21014
Magento vulnerable to a file upload restriction bypass
Critical
CVE-2021-21025
Magento XPath Injection
Medium
CVE-2021-21020
Magento Improper Access Control
Critical
CVE-2021-21018
Magento OS Command Injection
Critical
CVE-2021-21016
Magento OS command injection via the WebAPI
High
CVE-2021-21015
Magento OS command injection via the customer attribute save controller
Medium
CVE-2020-29605
MantisBT Incorrect Authorization in bug_actiongroup_page.php
Medium
CVE-2020-29604
MantisBT Missing Authorization access check in bug_actiongroup.php
Medium
CVE-2020-29603
MantisBT Insecure Storage in manage_proj_edit_page.php
Medium
CVE-2021-20185
Moodle Client side denial of service via personal message
High
CVE-2021-20187
Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration
Medium
CVE-2021-20184
Moodle Grade information disclosure in grade's external fetch functions
Medium
CVE-2021-20186
Moodle Cross-site Scripting
Medium
CVE-2021-20183
Moodle Vulnerable to Reflected Cross-site Scripting
High
CVE-2020-23355
Codiad Vulnerable to PHP Magic Hash Vulnerability
High
CVE-2021-3291
Zen Cart vulnerable to authenticated remote code execution
High
CVE-2020-35239
CakePHP allows method override parameters to bypass CSRF checks
Medium
CVE-2020-21146
Feehi CMS vulnerable to Cross-site Scripting in Username Field
High
CVE-2020-22643
Feehi CMS arbitrary file upload vulnerability
Medium
CVE-2020-27852
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature
Medium
CVE-2020-27851
Gravity Forms stored HTML injection vulnerability
Medium
CVE-2020-27850
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.