High
CVE-2021-29460
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
Critical
CVE-2021-30492
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
High
ghsa-4mg9-vhxq-vm7j
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
High
CVE-2021-29472
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
Medium
CVE-2021-21365
Cross-Site Scripting in Bootstrap Package
Unrated
drupal-contrib-2021-006
drupal/samlauth - SA-CONTRIB-2021-006
High
Exploited in attacks
CVE-2020-36193
Directory Traversal in Archive_Tar
Critical
CVE-2021-21427
Backport for CVE-2021-21024 Blind SQLi from Magento 2
Critical
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Medium
CVE-2020-13672
Drupal core - SA-CORE-2021-002
Medium
CVE-2021-24323
WooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-29440
Grav's Twig processing allowing dangerous PHP functions by default
Critical
ghsa-88rc-3p98-rgvx
After order payment process manipulation in shopware/platform and shopware/core
Medium
ghsa-3pcr-4982-548m
Exposure of .env if project root is configured as web root in shopware/production
Critical
ghsa-qg7c-q3vq-rgxr
Leak of information via Store-API aggregations in shopware/platform and shopware/core
Low
ghsa-7fjp-g4m7-fx23
User (Encrypted) Password Field Being Serialised
High
CVE-2021-30130
Improper Certificate Validation in phpseclib
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
Medium
CVE-2021-27908
Mautic vulnerable to secret data exfiltration via symfony parameters
Medium
CVE-2021-20281
Moodle allowed some users without permission to view other users' full names
Medium
CVE-2020-25628
Cross site-scripting (XSS) moodle
Medium
CVE-2020-25702
Cross-site Scripting (XSS) in moodle
High
CVE-2020-25699
Privilage Escalation in moodle
Medium
CVE-2020-25701
Privilage Escalation in moodle
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.