Critical
CVE-2021-23682
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
High
CVE-2021-44892
ThinkPHP Remote Code Execution (RCE) vulnerability
Critical
CVE-2022-21686
Server Side Twig Template Injection
Critical
CVE-2021-3850
Authentication Bypass in ADOdb/ADOdb
Medium
CVE-2022-0226
Cross-Site Request Forgery (CSRF) in livehelperchat
Medium
CVE-2022-51016
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
High
CVE-2022-51014
Unhandled exception when decoding form response JSON
High
CVE-2022-51015
Unchecked validity of Facing values in PlayerActionPacket
High
CVE-2022-51017
Uncapped length of skin data fields submitted by players
Medium
CVE-2022-51018
Book page text, count, and author/title length is not limited in PocketMine-MP
High
CVE-2022-21647
Deserialization of Untrusted Data in Codeigniter4
Medium
CVE-2021-4097
phpservermon is vulnerable to CRLF Injection
High
CVE-2021-43836
PHP file inclusion in the Sulu admin panel
High
CVE-2021-4075
Server-Side Request Forgery in snipe/snipe-it
Medium
CVE-2021-22970
Server-Side Request Forgery in Concrete CMS
Medium
CVE-2021-22969
Server-Side Request Forgery in Concrete CMS
High
CVE-2021-22968
Improper file handling in concrete5/core
Medium
CVE-2021-41188
Authenticated Stored XSS in shopware/shopware
Critical
CVE-2021-41745
Showdoc File Upload Vulnerability
Low
CVE-2021-41176
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
Medium
CVE-2021-28661
SilverStripe GraphQL Server permission checker not inherited by query subclass.
High
CVE-2021-22958
Server-Side Request Forgery vulnerability in concrete5
High
CVE-2021-41129
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.