Unrated
drupal-contrib-2021-033
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
High
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
High
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
High
CVE-2021-32759
Data Flow Sanitation Issue Fix
High
CVE-2021-29487
October CMS auth bypass and account takeover
Medium
CVE-2021-37704
Exposed phpinfo() leadked via documentation files
High
Exploited in attacks
CVE-2021-32648
Account Takeover in Octobercms
High
CVE-2021-39173
Cachet vulnerable to forced reinstall
High
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
High
CVE-2021-37711
Authenticated server-side request forgery in file upload via URL.
High
CVE-2021-32752
Files or Directories Accessible to External Parties in ether/logs
High
CVE-2021-34551
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
Critical
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
High
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Critical
CVE-2021-30108
Server-Side Request Forgery in Feehi CMS
Unrated
drupal-contrib-2021-013
drupal/graphql - SA-CONTRIB-2021-013
Medium
CVE-2021-31779
Server-Side Request Forgery in yoast_seo
Critical
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Critical
CVE-2020-5777
Authentication bypass in MAGMI
Critical
CVE-2021-30492
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
High
ghsa-4mg9-vhxq-vm7j
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
Critical
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
High
CVE-2021-29440
Grav's Twig processing allowing dangerous PHP functions by default
Medium
CVE-2021-20280
Cross-site scripting (XSS) and Server side request forgery (SSRF) in moodle
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.