Medium
CVE-2021-23393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24405
Easy Cookies Policy <= 1.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2021-34675
NEX Forms <= 7.8.7 - Authentication Bypass for PDF Reports
Medium
be0ef9d4-abb0-4801-b847-b84912bc6677
BCS BatchLine Book Importer <= 1.5.7 - Arbitrary Product Import/Update
Medium
CVE-2021-20734
Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting
High
CVE-2021-23392
Uncontrolled Resource Consumption in locutus
High
CVE-2021-32674
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
Medium
CVE-2020-26136
Authentication bypass in SilverStripe GraphQL
Medium
CVE-2021-28169
Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability
High
CVE-2021-34363
The Fuck Arbitrary File Deletion via Path Traversal
Medium
CVE-2021-24387
WP Pro Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting
High
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Unrated
CVE-2021-3533
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world writable directory. When this occurs, there is a race condition on the managed machine. A malicious,
Critical
CVE-2021-24375
Motor – Cars, Parts, Service, Equipments and Accessories WooCommerce Store < 3.1.0 - Local File Inclusion
Medium
CVE-2021-24432
Advanced AJAX Product Filters <= 1.5.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-23387
Open Redirect in trailing-slash
Critical
CVE-2021-25945
Prototype pollution vulnerability in js-extend
Critical
CVE-2021-29300
Command Injection in @ronomon/opened
High
CVE-2021-33502
ReDoS in normalize-url
Medium
CVE-2021-33561
Cross-site scripting in Shopizer
Medium
CVE-2021-33562
Cross-site scripting in Shopizer
Critical
CVE-2021-20195
keycloak Self Stored Cross-site Scripting vulnerability
Medium
CVE-2020-25724
Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy
Medium
CVE-2020-14340
Uncontrolled Resource Consumption in XNIO
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.