High
CVE-2021-27911
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-27912
XSS vulnerability on asset view
Medium
CVE-2021-23434
Prototype Pollution in object-path
Medium
CVE-2021-36787
Cross-site Scripting in the femanager TYPO3 extension
Medium
CVE-2021-36788
Cross-site Scripting in the yoast_seo TYPO3 extension
High
CVE-2021-36786
Sensitive Data Exposure in miniorange_saml
Critical
CVE-2021-23420
Deserialization of Untrusted Data in codeception/codeception
Critical
CVE-2021-23421
Prototype Pollution in merge-change
High
CVE-2021-3689
Use of Insufficiently Random Values in yiisoft/yii2-dev
Medium
CVE-2021-3692
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
Critical
CVE-2021-38384
Incorrect Authorization in serverless-offline
Medium
CVE-2021-23419
Prototype Pollution in open-graph
Medium
CVE-2020-22392
Cross Site Scripting in Subrion CMS
High
CVE-2021-36804
Malicious password-reset in Akaunting
Critical
CVE-2021-34371
Deserialization of Untrusted Data in Neo4j
Medium
CVE-2021-3680
Inadequate Encryption Strength in showdoc
Critical
CVE-2019-19208
Code injection in codiad
Medium
CVE-2021-39132
YAML deserialization can run untrusted code
High
CVE-2021-39133
Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server
High
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
High
CVE-2021-39178
XSS in Image Optimization API for Next.js
High
CVE-2021-32831
Code Injection in total.js
High
CVE-2020-6950
Directory traversal in Eclipse Mojarra
High
CVE-2021-3749
axios Inefficient Regular Expression Complexity vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.