Medium
CVE-2021-24775
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2021-25115
WP Photo Album Plus <= 8.0.10 - Stored Cross-Site Scripting
High
CVE-2021-24453
Include Me <= 1.2.1 - Local File Inclusion leading to Authenticated Remote Code Execution
Medium
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment)
Medium
CVE-2021-45958
UltraJSON vulnerable to Out-of-bounds Write
Medium
CVE-2021-24944
Custom Dashboard & Login Page < 6.9.5 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24919
Wicked Folders <= 2.18.9 - Subscriber+ SQL Injection
Medium
CVE-2021-25092
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset
Medium
CVE-2021-25091
Link Library <= 7.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-25093
Link Library <= 7.2.7 - Missing Authorization Checks
High
CVE-2021-23727
OS Command Injection in celery
High
CVE-2021-24761
Error Log Viewer by BestWebSoft <= 1.1.1 - Cross-Site Request Forgery
High
CVE-2021-24688
Orange Form <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-24707
Learning Courses < 5.0 - Authenticated Cross-Site Scripting
High
CVE-2021-24704
Orange Form <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-44760
WP-DownloadManager plugin <= 1.68.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-25085
WOOF - Products Filter for WooCommerce <= 1.2.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24950
Insight Core <= 1.0 - Authenticated PHP Object Injection & Stored Cross-Site Scripting
Medium
CVE-2021-24926
Domain Check <= 1.0.16 - Reflected Cross-Site Scripting via domain
Medium
CVE-2021-25097
LabTools <= 1.0 - Missing Authorization
Medium
CVE-2021-25089
UpdraftPlus WordPress Backup Plugin <= 1.16.68 - Reflected Cross-Site Scripting via updraft_restore
Medium
CVE-2021-24648
Registration Magic <= 5.0.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-24933
Dynamic Widgets <= 1.5.16 - Reflected Cross-Site Scripting
Critical
CVE-2021-43857
Gerapy may cause remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.