High
CVE-2020-1920
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2019-25050
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and
High
fc62adbf-1f04-46b2-9ae9-aac3dbce8759
WP SEO TDK <= 2.1.2 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2021-24497
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24547
KN Fix Your Title <= 1.0.1 - Stored Cross-Site Scripting
Medium
5653f1aa-06da-4208-afa2-19ef31b8be2f
Google Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
High
CVE-2021-24602
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Medium
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Medium
0efff314-b14f-4af4-b225-ba7e41d01b2e
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2021-3647
URIjs Vulnerable to Hostname spoofing via backslashes in URL
Medium
CVE-2021-28114
Cross-site Scripting in Froala WYSIWYG Editor
High
CVE-2021-32770
Basic-auth app bundle credential exposure in gatsby-source-wordpress
Medium
CVE-2021-34429
Encoded URIs can access WEB-INF directory in Eclipse Jetty
Medium
fd12ce4a-585d-4e26-88fb-1ab9dcc8727d
RestroPress <= 2.8.3 - Missing Authorization
Medium
CVE-2021-24535
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-24380
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24534
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Medium
CVE-2021-24540
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-24466
Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24536
Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
b7d84cb9-175f-433c-ab5c-d89621847b4d
Photo Gallery by 10Web <= 1.5.78 - Stored Cross-Site Scripting via Uploaded SVG
Medium
CVE-2021-24519
VikRentCar Car Rental Management System < 1.1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
High
80c9f2e3-afdc-4ba2-a1ef-4c1d166d0757
RestroPress <= 2.8.2 - Cross-Site Request Forgery to Cart Manipulation
Medium
CVE-2021-34676
NEX-Forms <= 7.8.7 Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.