Medium
CVE-2024-21910
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2020-36378
Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36379
Vulnerability in remove function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36377
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36376
Vulnerability in list function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36381
Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36380
Vulnerability in crunch function leads to arbitrary code execution via filePath parameters
Medium
CVE-2020-22864
Cross site scripting in froala-editor
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Medium
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Medium
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
High
CVE-2021-4229
Embedded malware in ua-parser-js
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
High
CVE-2021-23452
Prototype Pollution in x-assign
High
CVE-2021-41167
modern-async's `forEachSeries` and `forEachLimit` functions do not limit the number of requests
Critical
CVE-2021-23449
Prototype Pollution in vm2
Medium
CVE-2021-41151
Path Traversal in @backstage/plugin-scaffolder-backend
Medium
CVE-2021-42227
Cross site scripting in kindeditor
High
CVE-2021-42228
Cross Site Request Forgery in kindeditor
Medium
CVE-2021-26272
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
Critical
CVE-2021-25916
Prototype pollution vulnerability in 'patchmerge'
Critical
CVE-2019-10061
OS Command Injection in node-opencv
Medium
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Critical
CVE-2021-23448
Prototype Pollution in config-handler
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.