High
CVE-2021-25956
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-22345
OS Command Injection in Centreon
Medium
CVE-2021-23425
Uncontrolled Resource Consumption in trim-off-newlines
High
CVE-2021-23424
Uncontrolled Resource Consumption in ansi-html
High
CVE-2021-38556
Command Injection in RaspAP 2.6.6
High
CVE-2021-38557
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
Medium
CVE-2021-23429
Uncontrolled Resource Consumption in transpile
High
CVE-2021-23406
Code Injection in pac-resolver
High
CVE-2021-23430
Directory Traversal in startserver
Medium
CVE-2021-23432
Prototype Pollution in mootools
Medium
CVE-2021-23431
Cross-site Request Forgery (CSRF) in joplin
High
CVE-2021-25957
Weak Password Recovery Mechanism for Forgotten Password
Low
CVE-2021-32830
Command injection in @diez/generation
Medium
CVE-2021-3678
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
Critical
CVE-2021-39185
Default CORS config allows any origin with credentials
High
CVE-2021-39187
Parse Server crashes with query parameter
Medium
CVE-2021-24720
GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting
Medium
86c3ef76-d4d0-4106-850f-88e9ea176979
Easy Social Icons <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24692
Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download
High
67ae29ee-ec3d-41d2-8691-ba1c615d243d
Meow Gallery (+ Gallery Block) <= 4.1.9 - Missing Authorization to Arbitrary Options Update
High
CVE-2021-24465
Meow Gallery (+ Gallery Block) <= 4.1.8 - SQL Injection
Low
CVE-2021-27913
Use of a Broken or Risky Cryptographic Algorithm
Medium
CVE-2021-27909
XSS vulnerability on password reset page
High
CVE-2021-27910
Stored XSS vulnerability on Bounce Management Callback
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.