Medium
CVE-2021-21029
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Critical
CVE-2021-21024
Magento Blind SQL Injection in the Search module
Critical
CVE-2021-21014
Magento vulnerable to a file upload restriction bypass
Critical
CVE-2021-21025
Magento XPath Injection
Medium
CVE-2021-21020
Magento Improper Access Control
Critical
CVE-2021-21018
Magento OS Command Injection
Critical
CVE-2021-21016
Magento OS command injection via the WebAPI
High
CVE-2021-21015
Magento OS command injection via the customer attribute save controller
High
CVE-2021-0341
Square OkHttp can accept the wrong certificate
Medium
CVE-2020-7021
Insertion of Sensitive Information into Log File in Elasticsearch
Medium
CVE-2020-29582
Incorrect Default Permissions in JetBrains Kotlin
Medium
CVE-2020-29605
MantisBT Incorrect Authorization in bug_actiongroup_page.php
Medium
CVE-2020-29604
MantisBT Missing Authorization access check in bug_actiongroup.php
Medium
CVE-2020-29603
MantisBT Insecure Storage in manage_proj_edit_page.php
Medium
CVE-2021-20185
Moodle Client side denial of service via personal message
High
CVE-2021-20187
Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration
Medium
CVE-2021-20184
Moodle Grade information disclosure in grade's external fetch functions
Medium
CVE-2021-20186
Moodle Cross-site Scripting
Medium
CVE-2021-20183
Moodle Vulnerable to Reflected Cross-site Scripting
High
CVE-2020-23355
Codiad Vulnerable to PHP Magic Hash Vulnerability
High
CVE-2021-3291
Zen Cart vulnerable to authenticated remote code execution
Medium
CVE-2021-26271
CKEditor 4 ReDoS Vulnerability
Medium
CVE-2021-21615
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
High
CVE-2020-35239
CakePHP allows method override parameters to bypass CSRF checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.