Medium
CVE-2021-29624
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2020-7769
Command injection in nodemailer
Medium
CVE-2020-7761
Regular expression denial of service in @absolunet/kafe
Medium
CVE-2020-7760
Regular expression denial of service in codemirror
Critical
CVE-2020-27664
Authorization bypass in Strapi
Medium
CVE-2021-3163
Cross-site Scripting in quill
Critical
CVE-2020-8158
TypeORM vulnerable to MAID and Prototype Pollution
High
CVE-2020-7715
Prototype Pollution in deep-get-set
Critical
CVE-2020-7700
Prototype Pollution in phpjs
Medium
CVE-2021-27515
Path traversal in url-parse
Medium
CVE-2021-26539
Improper Input Validation in sanitize-html
High
CVE-2021-23337
lodash vulnerable to Code Injection via `_.template` imports key names
Critical
CVE-2021-23369
Remote code execution in handlebars when compiling templates
Medium
CVE-2021-23380
Arbitrary command execution in roar-pidusage
Critical
CVE-2021-28860
Prototype Pollution in mixme
High
CVE-2021-29489
Options structure open to Cross-site Scripting if passed unfiltered
High
ghsa-4whq-r978-2x68
Arbitrary code execution in ExifTool
High
CVE-2021-29486
cumulative-distribution-function Infinite Loop vulnerability
Medium
CVE-2021-29484
DOM XSS in Theme Preview
High
CVE-2017-18924
Code Injection in oauth2-server
Medium
CVE-2021-29446
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime
Medium
CVE-2021-29445
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
Medium
CVE-2021-29444
Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime
Medium
CVE-2021-29443
Padding Oracle Attack due to Observable Timing Discrepancy in jose
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.