Medium
CVE-2021-3427
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2021-25642
Deserialization of Untrusted Data in Apache Hadoop YARN
Medium
CVE-2022-36527
Jfinal Cross-site Scripting vulnerability
Medium
CVE-2021-3914
SmallRye Health UI Cross-site Scripting vulnerability
Medium
CVE-2022-2997
Insufficient Session Expiration in snipe/snipe-it
Medium
CVE-2022-3062
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Medium
1575e301-a26f-485e-bdf3-526b71c8306a
Better Font Awesome <= 2.0.1 - Missing Authorization to Plugin Options Update
High
CVE-2022-2255
Incorrect header handling in mod-wsgi
High
CVE-2021-42521
VTK NULL pointer dereference vulnerability
High
CVE-2022-24375
node-opcua DoS when bypassing limitations for excessive memory consumption
Medium
CVE-2022-38080
exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability
High
CVE-2022-37333
exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability
Medium
CVE-2021-4040
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
Medium
CVE-2021-43309
uri-template-lite Regular Expression Denial of Service
Medium
CVE-2018-14520
Kirby CMS 2.5.12 Cross-site Scripting
Medium
CVE-2018-14519
Kirby CMS 2.5.12 Cross-site Request Forgery
Critical
dbda16f5-65c2-47cf-8b06-6aa231b8fd11
Alphabetic Pagination <= 3.0.7 - Missing Authorization to Unauthenticated Arbitrary Options Update
High
CVE-2022-36387
About Me <= 1.0.12 - Missing Authorization
High
CVE-2022-36427
About Rentals <= 1.5 - Missing Authorization
Medium
CVE-2022-38067
Event Calendar <= 1.4.6 - Missing Authorization to Event Modification
Medium
CVE-2021-36829
Launcher: Coming Soon & Maintenance Mode <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-37344
Accommodation System <= 1.0.1 - Missing Authorization
Medium
CVE-2022-34656
Poll, Survey, Questionnaire and Voting system <= 1.7.4 - Authenticated (Administrator+) Cross-Site Scripting
High
CVE-2022-36358
SEO Scout <= 0.9.83 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.