High
7e199cd3-e2ce-4969-a517-4a9c2a84bf44
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24691
Quiz And Survey Master <= 7.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24711
Software License Manager <= 4.5.0 - Cross-Site Request Forgery leading to Arbitrary Domain Deletion
Medium
2678d2c6-055e-462e-99da-bdc81bcc3662
Affiliate Power – Sales Tracking for Affiliate Marketers <= 2.2.0 - Reflected Cross-Site Scripting
High
CVE-2021-24546
EditorsKit <= 1.31.5 - Authenticated (Contributor+) Code Injection
Medium
CVE-2021-4333
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
Medium
CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risk
Critical
CVE-2021-37579
Security check skip in Apache Dubbo
Critical
CVE-2021-36161
Remote Code Execution in Apache Dubbo
Medium
e9b58db6-4059-4923-b1e3-3321cc7d3573
Avada <= 7.4.1 - Stored Cross-Site Scripting
Medium
CVE-2021-24576
Easy Accordion <= 2.0.21 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24712
Appointment Hour Booking <= 1.3.16 - Cross-Site Scripting
Medium
11280431-ee39-45da-909a-e9efc0e6266f
Avada <= 7.4.1 - Reflected Cross-Site Scripting
High
CVE-2021-37137
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
High
CVE-2021-37136
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
Medium
CVE-2021-32106
Cross-site scripting in ICEcoder
Medium
CVE-2021-31274
Cross-site Scripting in LibreNMS
Critical
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5
Medium
CVE-2021-38337
RSVPmaker Excel <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-38359
WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-38348
Advance Search <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-38349
Integration of Moneybird for WooCommerce <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-38340
WordPress Simple Shop <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-38357
SMS OVH <= 0.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.