Medium
CVE-2021-3957
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
Medium
CVE-2021-22967
Exposure of sensitive information in concrete5/core
High
CVE-2021-22968
Improper file handling in concrete5/core
Critical
CVE-2021-3943
Moodle vulnerable to RCE via unsafe deserialization
Medium
CVE-2021-43558
Cross-site Scripting in moodle
Medium
CVE-2021-39198
The disqualify lead action may be executed without CSRF token check
Critical
CVE-2021-43996
Incorrect Access Control in Ignition
Medium
CVE-2021-41273
Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
High
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
Unrated
drupal-core-2021-011
Drupal core - SA-CORE-2021-011
Unrated
drupal-contrib-2021-044
drupal/openid_connect_windows_aad - SA-CONTRIB-2021-044
Critical
CVE-2021-43608
DBAL 3 SQL Injection Security Vulnerability
Medium
CVE-2021-41258
Cross-site scripting (XSS) from image block content in the site frontend
Medium
CVE-2021-41252
Cross-site scripting (XSS) from writer field content in the site frontend
Low
CVE-2021-3938
snipe-it is vulnerable to Cross-site Scripting
Medium
CVE-2021-3932
twill is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
High
CVE-2021-3915
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
Medium
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-43561
Cross-site Scripting in pegasus/google-for-jobs
High
CVE-2021-43564
Unrestricted access to predictable file paths in hov/jobfair
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.