High
ghsa-gqcf-83rq-gpfr
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
Medium
CVE-2021-32106
Cross-site scripting in ICEcoder
Medium
CVE-2021-31274
Cross-site Scripting in LibreNMS
Critical
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5
Medium
CVE-2021-32713
Cross-site scripting
Medium
CVE-2021-32712
Exposure of Sensitive Information to an Unauthorized Actor
Critical
CVE-2020-18155
SQL Injection in Subrion CMS
High
CVE-2020-15877
Exposure of Resource to Wrong Sphere in LibreNMS
Low
CVE-2019-14671
Improper Input Validation in Firefly III
High
CVE-2021-28931
Arbitrary file upload in Fork CMS
Medium
CVE-2020-23700
Cross-site scripting in LavaLite-CMS
High
ghsa-jpwx-ffjq-wr4w
Content object state fetch functions open to SQL injection
Critical
CVE-2021-38302
SQL injection in TYPO3 extension
Medium
CVE-2021-36793
CSRF token exposure in TYPO3 extension
High
CVE-2021-25956
Dolibarr vulnerable to Improper Authentication and Improper Access Control
High
CVE-2020-22345
OS Command Injection in Centreon
High
CVE-2021-38556
Command Injection in RaspAP 2.6.6
High
CVE-2021-38557
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
High
CVE-2021-25957
Weak Password Recovery Mechanism for Forgotten Password
Medium
CVE-2021-3678
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
Low
CVE-2021-27913
Use of a Broken or Risky Cryptographic Algorithm
Medium
CVE-2021-27909
XSS vulnerability on password reset page
High
CVE-2021-27910
Stored XSS vulnerability on Bounce Management Callback
High
CVE-2021-27911
XSS vulnerability on contacts view
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.