High
CVE-2021-22958
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2021-23448
Prototype Pollution in config-handler
Medium
CVE-2021-25738
Code injection in Kubernetes Java Client
Medium
CVE-2021-41355
Credential Disclosure in System.DirectoryServices.Protocols
Medium
CVE-2021-3312
XML External Entity Reference in org.opencms:opencms-core
Medium
CVE-2020-29204
Cross-site Scripting in XXL-JOB
Critical
CVE-2020-28270
Prototype pollution in object-hierarchy-access
Medium
CVE-2021-42112
Cross-site Scripting in Limesurvey
Critical
CVE-2019-18413
SQL Injection and Cross-site Scripting in class-validator
Critical
CVE-2019-10762
SQL Injection in medoo
Medium
CVE-2019-20455
Improper Certificate Validation in Heartland & Global Payments PHP SDK
High
CVE-2020-8818
Origin Validation Error in Magento 2
Critical
CVE-2020-13909
Critical severity vulnerability in Ignition
Critical
CVE-2020-28274
Prototype pollution vulnerability in 'deepref'
Critical
CVE-2020-28280
Prototype pollution vulnerability in 'predefine'
Critical
CVE-2020-28283
Prototype pollution vulnerability in 'libnested'
Critical
CVE-2020-28282
Prototype pollution in getobject
Medium
CVE-2020-23849
Cross-site Scripting in jsoneditor
Medium
CVE-2021-23447
Cross-site Scripting in teddy
Low
ghsa-q324-q795-2q5p
Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
High
CVE-2021-22964
DOS and Open Redirect with user input
High
CVE-2021-21278
Risk of code injection
Medium
CVE-2020-5273
Stored XSS with custom URLs in PrestaShop module ps_linklist
Medium
a2c9b82a-b63c-4647-a561-d567b6e9ff0a
Discounts Manager for Products <= 3.4.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.