Medium
CVE-2021-24450
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24473
User Profile Picture < 2.6.0 - Authenticated Insecure Direct Object Reference
Medium
CVE-2021-24481
Any Hostname <= 1.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2020-26153
Event Espresso Core <= 4.10.6.p - Reflected Cross-Site Scripting
Medium
2621cb32-3753-42e7-8690-88c680bdf808
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.9.1 - Cross-Site Scripting
Medium
1d430b33-1607-46b3-8780-ac5cfbb7d6ec
EventCalendar <= 1.1.45 - Cross-Site Scripting
Critical
CVE-2021-4449
ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
Low
CVE-2021-34428
SessionListener can prevent a session from being invalidated breaking logout
Unrated
drupal-contrib-2021-019
drupal/opigno_group_manager - SA-CONTRIB-2021-019
Unrated
drupal-contrib-2021-018
drupal/opigno_learning_path - SA-CONTRIB-2021-018
Medium
CVE-2021-24447
WP Image Zoom <= 1.46 - Local File Inclusion
Medium
CVE-2021-20746
WordPress Popular Posts <= 5.3.2 - Authenticated Cross-Site Scripting
Medium
CVE-2018-10704
Cross-site Scripting in yii2cmf
Critical
CVE-2019-7725
Deserialization of Untrusted Data in NukeViet
Critical
CVE-2019-7726
SQL Injection in NukeViet
High
CVE-2020-23264
Cross-Site Request Forgery in forkcms
High
CVE-2020-13252
Command Injection in Centreon
Low
CVE-2019-20789
Croos-site scripting in Croogo
Medium
CVE-2020-12467
Session Fixation in Subrion CMS
High
CVE-2021-3603
PHPMailer untrusted code may be run from an overridden address validator
High
CVE-2021-34551
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
Medium
CVE-2021-32245
Cross-site scripting in PageKit
Medium
CVE-2021-32697
Form validation can be skipped
Medium
CVE-2021-29060
Regular Expression Denial of Service (ReDOS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.