Medium
CVE-2021-3730
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-3729
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Critical
CVE-2020-36474
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
High
CVE-2021-39139
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-39140
XStream can cause a Denial of Service
High
CVE-2021-39141
XStream is vulnerable to an Arbitrary Code Execution attack
High
Exploited in attacks
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-39145
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39146
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39147
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39148
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39149
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39150
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39151
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39152
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39153
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39154
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-37694
Code injection issue for java-spring-cloud-stream-template
Medium
CVE-2021-34532
ASP.NET Core Information Disclosure Vulnerability
Medium
CVE-2021-35955
Cross site scripting via HTML attributes in the back end
High
CVE-2021-39157
Improper Handling of Exceptional Conditions in detect-character-encoding
Unrated
drupal-contrib-2021-025
drupal/admin_toolbar - SA-CONTRIB-2021-025
High
CVE-2021-38342
Nested Pages <= 3.1.15 - Cross-Site Request Forgery to Arbitrary Post Deletion and Modification
Medium
df3b5124-1151-4402-b30f-038470c7a951
TS Poll – Best Poll Plugin for WordPress <= 1.5.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.