High
CVE-2021-41500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
ghsa-3w6p-8f82-gw8r
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
Medium
CVE-2020-35215
Malicious Atomix node queries expose sensitive information
High
CVE-2020-35209
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
High
CVE-2020-35214
An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.
Medium
CVE-2020-35210
A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.
Medium
CVE-2020-35216
An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.
High
CVE-2020-35213
An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.
High
CVE-2020-35211
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.
Medium
CVE-2021-42550
Deserialization of Untrusted Data in logback
Medium
CVE-2021-4123
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4121
yetiforcecrm is vulnerable to Cross-site Scripting
Low
CVE-2021-43838
Regular Expression Denial of Service (ReDoS) in jsx-slack
Medium
CVE-2021-33430
NumPy Buffer Overflow (Disputed)
Low
CVE-2021-36889
tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) <= 1.6 - Cross-Site Scripting
Critical
CVE-2021-44350
ThinkPHP5 SQL Injection vulnerability
Unrated
737
Ijoomla Guru - Various
Critical
ghsa-j7c3-96rf-jrrp
Critical vulnerability in log4j may affect generated PEAR projects
High
CVE-2021-4111
YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number
Medium
CVE-2021-4117
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
Medium
CVE-2021-4116
yetiforcecrm is vulnerable to Cross-site Scripting
Medium
CVE-2021-4119
BookStack is vulnerable to Improper Access Control.
Medium
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Low
CVE-2021-48006
Inability to de-op players if listed in ops.txt with non-lowercase letters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.