Critical
CVE-2021-4380
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2021-4374
WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update
Medium
c1b0ac88-8afd-4e46-9721-7aab91090e37
PublishPress: Editorial Calendar, Workflow, Comments, Notifications and Statuses <= 3.5.0 - Cross-Site Scripting
Medium
CVE-2021-24654
User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24673
Appointment Hour Booking <= 1.3.15 Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24676
Better Find and Replace <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-24679
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24678
CM Tooltip Glossary <= 3.9.20 - Authenticated Stored Cross-Site Scripting
High
284b9b04-aa8f-41ff-b944-3488c5da8e20
Listing, Classified Ads & Business Directory – uListing <= 2.0.8 - Cross-Site Request Forgery
Medium
1522d23b-7655-4fde-a18b-b46c6625185f
UsersWP – User Registration & User Profile <= 1.2.2.28 - Reflected Cross-Site Scripting
Medium
0ef7d891-0efa-45e5-ad16-2f34fc017c8f
ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.2.3 - Reflected Cross-Site Scripting
High
CVE-2021-23437
Uncontrolled Resource Consumption in pillow
Critical
CVE-2021-24741
Support Board <= 3.3.3 - Multiple Unauthenticated SQL Injections
High
CVE-2021-23428
Path traversal in elFinder.NetCore
Critical
CVE-2021-23427
Imporoper path validation in elFinder.NetCore
High
CVE-2021-34435
Remote code execution in Eclipse Theia
Medium
CVE-2021-23438
Type confusion in mpath
High
CVE-2021-23426
Prototype Pollution in Proto
Medium
CVE-2021-30483
Directory Traversal in isomorphic-git
Critical
CVE-2021-23436
Prototype Pollution in immer
High
CVE-2021-39109
Path traversal in atlasboard
Critical
CVE-2021-38302
SQL injection in TYPO3 extension
Medium
CVE-2021-36793
CSRF token exposure in TYPO3 extension
Medium
CVE-2021-32822
Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor in hbs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.