Medium
CVE-2021-39138
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2021-32809
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality
High
CVE-2021-32808
Widget feature vulnerability allowing to execute JavaScript code using undo functionality
Medium
CVE-2021-37700
Clipboard-based DOM-XSS
Medium
CVE-2021-37699
Open Redirect in Next.js
Medium
CVE-2021-23414
Cross-site Scripting in video.js
Medium
CVE-2021-23417
Prototype Pollution in deepmergefn
Medium
CVE-2021-23416
Cross-site Scripting in curly-bracket-parser
Medium
CVE-2021-3664
Open redirect in url-parse
Medium
CVE-2021-23413
jszip Vulnerable to Prototype Pollution
Medium
CVE-2021-23343
Regular Expression Denial of Service in path-parse
Medium
CVE-2018-3718
vercel/serve allows access to restricted files if filename is URL encoded.
Medium
ghsa-hxwm-x553-x359
Arbitrary Command Injection due to Improper Command Sanitization
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
High
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Medium
CVE-2021-32796
Misinterpretation of malicious XML input
High
ghsa-6cj2-92m5-7mvp
Improperly Controlled Modification of Object Prototype Attributes
Medium
CVE-2021-23411
Cross-site scripting in anchorme
Critical
CVE-2021-23412
Command injection in gitlogplus
Critical
CVE-2020-13619
OS Command Injection in Locutus
Medium
CVE-2021-32012
Denial of Service in SheetJS Pro
Medium
CVE-2021-32013
Denial of Service in SheetsJS Pro
Medium
CVE-2021-32014
Denial of Service in SheetJS Pro
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.