High
CVE-2021-39239
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-3807
Inefficient Regular Expression Complexity in chalk/ansi-regex
High
CVE-2021-3810
Inefficient Regular Expression Complexity in code-server
Critical
CVE-2021-41303
Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass
High
CVE-2021-23442
Prototype Pollution in cookiex/deep
High
CVE-2021-3804
Inefficient Regular Expression Complexity in taro
Medium
CVE-2021-39189
Observable Response Discrepancy in Lost Password Service
Medium
CVE-2021-39208
Partial path traversal in sharpcompress
Medium
CVE-2021-39227
Prototype Pollution in the merge and clone helper methods
Medium
ghsa-wfrj-qqc2-83cm
Remote command injection when using sendmail email transport
High
ghsa-84p7-fh9c-6g8h
Prototype Pollution in mixme
High
CVE-2021-32838
Regular Expression Denial of Service in flask-restx
Medium
CVE-2021-39325
OptinMonster <= 2.6.0 - Reflected Cross-Site Scripting
High
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
High
CVE-2021-24754
MainWP Child Reports <= 2.0.7 - Admin+ SQL Injection
Medium
CVE-2021-24412
Html5 Audio Player <= 2.1.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24622
Customer Service Software & Support Ticket System < 5.10.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-39331
YITH Easy Login & Register Popup for WooCommerce <= 1.8.0 - Authentication Bypass via Password Reset
Medium
CVE-2021-24672
One User Avatar <= 2.3.6 - Stored Cross-Site Scripting
Medium
CVE-2021-24760
Gutenberg PDF Viewer Block <= 1.0 - Cross-Site Scripting
Medium
CVE-2021-24675
One User Avatar <= 2.3.6 - Cross-Site Request Forgery
Medium
CVE-2021-24752
CatchThemes Plugins (Various Versions) - Missing Authorization
Medium
CVE-2021-24413
Easy Twitter Feed < 1.2 - Cross-Site Scripting
High
CVE-2021-24642
Scroll Baner <= 1.0 - Cross-Site Request Forgery to Remote Code Execution and/or Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.