High
CVE-2021-21414
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2021-23348
Arbitrary Command Injection in portprocesses
High
CVE-2021-21413
Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate
Medium
CVE-2021-21412
[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values
Critical
CVE-2021-28918
Improper parsing of octal bytes in netmask
High
CVE-2020-7774
Prototype Pollution in y18n
Medium
CVE-2021-27884
Weak JSON Web Token in yapi-vendor
Critical
CVE-2020-8298
Command injection in fs-path
Critical
CVE-2021-23344
total.js Remote Code Execution Vulnerability
High
CVE-2021-28092
Regular Expression Denial of Service (ReDoS)
High
CVE-2021-27290
Regular Expression Denial of Service (ReDoS)
High
CVE-2021-23354
printf vulnerable to Regular Expression Denial of Service (ReDoS)
Critical
CVE-2020-7785
Command injection in node-ps
High
CVE-2020-28426
Command injection in kill-process-on-port
Critical
CVE-2021-23355
Command Injection in ps-kill
Critical
CVE-2021-23356
Code injection in kill-process-by-name
Critical
CVE-2021-25914
Prototype Pollution Vulnerability in object-collider
Critical
CVE-2020-28273
Prototype pollution in set-in
High
CVE-2021-21267
Regular Expression Denial-of-Service in npm schema-inspector
High
CVE-2021-21384
Null characters not escaped
Medium
CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
High
CVE-2021-26814
Improper Input Validation (RCE)
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
High
CVE-2021-23352
Madge vulnerable to command injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.