High
CVE-2021-37713
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 757
Reset filters
High
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Critical
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Critical
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Medium
CVE-2021-23414
Cross-site Scripting in video.js
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
High
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Medium
CVE-2021-29060
Regular Expression Denial of Service (ReDOS)
High
CVE-2021-23391
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
High
CVE-2021-29469
Node-Redis potential exponential regex in monitor mode
Medium
CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
Medium
ghsa-7wwv-vh3v-89cq
ReDOS vulnerabities: multiple grammars
Critical
ghsa-8qh7-xw58-3ww7
Malicious Package in radic-util
Critical
ghsa-2vqq-jgxx-fxjc
Malicious Package in motiv.scss
Critical
ghsa-4wcx-c9c4-89p2
Malicious Package in react-datepicker-plus
Critical
ghsa-5w4r-wwc3-6qcp
Malicious Package in precode.js
Critical
ghsa-p7w2-mc6m-mfx2
Malicious Package in scroool
Critical
ghsa-4627-w373-375v
Malicious Package in grunt-radical
Critical
ghsa-2xw5-3767-qxvm
Malicious Package in ng-ui-library
Critical
ghsa-9p49-cwh3-4qhf
Malicious Package in grunt-radic
Critical
ghsa-c722-pv5w-cfg2
Malicious Package in github-jquery-widgets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.