Medium
ghsa-hwvm-vfw8-93mw
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-43812
Open redirect in @auth0/nextjs-auth0
Medium
CVE-2021-23562
Code injection in plupload
Medium
CVE-2021-4000
Open Redirect in showdoc
High
CVE-2021-3980
Information exposure in elgg
Critical
CVE-2021-23264
Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search
Critical
CVE-2021-23639
Code Injection in md-to-pdf.
Medium
CVE-2021-23700
Prototype Pollution in merge-deep2.
Medium
CVE-2021-4089
snipe-it is vulnerable to Improper Access Control
Medium
CVE-2021-23561
Prototype Pollution in comb
High
CVE-2021-23463
Improper Restriction of XML External Entity Reference in com.h2database:h2.
Medium
CVE-2021-23663
Prototype Pollution in sey
Medium
CVE-2021-4084
Cross-site Scripting in pimcore
Medium
CVE-2021-4082
pimcore is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4081
pimcore is vulnerable to Cross-site Scripting
Medium
CVE-2021-4097
phpservermon is vulnerable to CRLF Injection
Medium
CVE-2021-4092
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-4108
snipe-it is vulnerable to Cross-site Scripting
High
CVE-2021-44549
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail
Medium
CVE-2021-4107
yetiforcecrm is vulnerable to Cross-site Scripting
Medium
CVE-2021-42220
Dolibarr Cross Site Scripting (XSS) vulnerability
Critical
CVE-2021-43113
Command injection in itext7-core
Medium
CVE-2021-25067
Landing Page Builder <= 1.4.9.5 - Reflected Cross-Site Scripting
High
CVE-2021-43353
Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.