High
CVE-2021-3840
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-42362
WordPress Popular Posts <= 5.3.2 - Authenticated Arbitrary File Upload
Medium
CVE-2021-24903
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 6.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-36885
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-36886
Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery
Medium
CVE-2021-42361
Contact Form Email <= 1.3.24 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24896
Caldera forms <= 1.9.4 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24945
Like Button Rating <= 2.6.37 - Unauthorised Vote Export to Email & IP Addresses Disclosure
Critical
CVE-2021-43571
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Critical
CVE-2021-43569
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Critical
CVE-2021-43570
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Critical
CVE-2021-43466
Template injection in thymeleaf-spring5
Medium
CVE-2021-22051
Request injection in Spring Cloud Gateway
High
CVE-2021-3572
Improper Input Validation in pip
Critical
CVE-2021-25979
Apostrophe CMS Insufficient Session Expiration vulnerability
Medium
CVE-2021-41251
Unauthorized access to data in @sap-cloud-sdk/core
High
CVE-2021-3924
Path traversal in grav
Medium
CVE-2021-25978
Cross-site Scripting in apostrophe
High
ghsa-jcjx-c3j3-44pr
Insufficient Session Expiration in @cyyynthia/tokenize
High
CVE-2021-41170
Insecure Inherited Permissions in neoan3-apps/template
High
CVE-2020-14389
Improper privilege management in Keycloak
High
CVE-2021-36908
WP Reset PRO 5.00-5.98 - Cross-Site Request Forgery
High
CVE-2021-36909
WP Reset – Most Advanced WordPress Reset Tool (PRO) 5.00- 5.98 - Missing Authorization to Database Reset
Medium
CVE-2021-20840
Booking Package <= 1.5.10 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.