Low
CVE-2021-33604
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-31412
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Low
ghsa-8vfw-v2jv-9hwc
Reflected cross-site scripting in development mode handler in Vaadin
High
CVE-2021-32702
Reflected XSS from the callback handler's error query parameter
High
CVE-2020-12642
XXE vulnerability in Launch import
High
CVE-2021-29620
XXE vulnerability on Launch import with externally-defined DTD file
Medium
CVE-2021-24479
DrawBlog <= 0.90 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24452
W3 Total Cache <= 2.1.4 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24477
Migrate Users <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Medium
CVE-2021-24436
W3 Total Cache <= 2.1.3 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24476
Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24480
Event Geek <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-24472
QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File Inclusion
Medium
CVE-2021-24464
YouTube Embed, Playlist and Popup <= 2.3.8 - Contributor+ Stored Cross-Site Scripting
Critical
CVE-2021-34621
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24455
Tutor LMS <= 1.9.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-4399
Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24470
Yada Wiki <= 3.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24478
Bookshelf <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24521
Side Menu Lite <= 2.2 - SQL Injection
Critical
CVE-2021-34623
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24488
Post Grid <= 2.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-24474
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting via id Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.