Medium
CVE-2021-4132
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
High
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Unrated
drupal-contrib-2022-002
drupal/simple_oauth - SA-CONTRIB-2022-002
Unrated
drupal-contrib-2022-001
drupal/super_login - SA-CONTRIB-2022-001
Medium
CVE-2021-44116
Cross-site Scripting in Anchor CMS
Medium
CVE-2022-22293
Cross site scripting in dolibarr
Unrated
drupal-contrib-2021-047
drupal/mail_login - SA-CONTRIB-2021-047
Medium
CVE-2021-4123
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4121
yetiforcecrm is vulnerable to Cross-site Scripting
Critical
CVE-2021-44350
ThinkPHP5 SQL Injection vulnerability
High
CVE-2021-4111
YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number
Medium
CVE-2021-4117
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
Medium
CVE-2021-4116
yetiforcecrm is vulnerable to Cross-site Scripting
Medium
CVE-2021-4119
BookStack is vulnerable to Improper Access Control.
Low
CVE-2021-48006
Inability to de-op players if listed in ops.txt with non-lowercase letters
Medium
CVE-2021-4000
Open Redirect in showdoc
High
CVE-2021-3980
Information exposure in elgg
Medium
CVE-2021-4089
snipe-it is vulnerable to Improper Access Control
Medium
CVE-2021-4084
Cross-site Scripting in pimcore
Medium
CVE-2021-4082
pimcore is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4081
pimcore is vulnerable to Cross-site Scripting
Medium
CVE-2021-4097
phpservermon is vulnerable to CRLF Injection
Medium
CVE-2021-4092
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4108
snipe-it is vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.