Unrated
drupal-contrib-2021-007
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filters
Medium
CVE-2020-5776
Cross-Site Request Forgery in MAGMI
Critical
CVE-2020-5777
Authentication bypass in MAGMI
High
CVE-2020-23960
Cross-Site Request Forgery in ForkCMS
High
CVE-2020-35700
SQL Injection in librenms
Medium
CVE-2021-21264
Bypass of fix for CVE-2020-26231, Twig sandbox escape
Critical
CVE-2020-36326
Object injection in PHPMailer/PHPMailer
High
CVE-2021-29460
Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby
Critical
CVE-2021-30492
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
High
CVE-2021-29472
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
Medium
CVE-2021-21365
Cross-Site Scripting in Bootstrap Package
Unrated
drupal-contrib-2021-006
drupal/samlauth - SA-CONTRIB-2021-006
Critical
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Medium
CVE-2020-13672
Drupal core - SA-CORE-2021-002
High
CVE-2021-29440
Grav's Twig processing allowing dangerous PHP functions by default
Critical
ghsa-88rc-3p98-rgvx
After order payment process manipulation in shopware/platform and shopware/core
Medium
ghsa-3pcr-4982-548m
Exposure of .env if project root is configured as web root in shopware/production
Critical
ghsa-qg7c-q3vq-rgxr
Leak of information via Store-API aggregations in shopware/platform and shopware/core
Low
ghsa-7fjp-g4m7-fx23
User (Encrypted) Password Field Being Serialised
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
Medium
CVE-2021-27908
Mautic vulnerable to secret data exfiltration via symfony parameters
Medium
CVE-2020-25701
Privilage Escalation in moodle
Medium
CVE-2021-3271
Stored cross-site scripting in PressBooks
Medium
CVE-2021-21359
Denial of Service in Page Error Handling
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.