High
CVE-2021-24252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,598
Medium
CVE-2021-24247
Contact Form Check Tester <= 1.0.2 - Authenticated (Subscriber+) Cross-Site Scripting
High
CVE-2021-21431
Improper Input Validation in sopel-plugins.channelmgnt
Medium
CVE-2020-23762
Larsens Calender <= 1.2 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-36850
Media File Renamer – Auto & Manual Rename <= 5.2.5 - Cross-Site Request Forgery
Low
ghsa-fxq4-r6mr-9x64
CSRF Vuln can expose user's QRcode
Critical
CVE-2021-24236
Imagements <= 1.2.5 - Arbitrary File Upload
Medium
CVE-2021-24207
WP Page Builder <= 1.2.3 - Insecure Default to Unauthorized Page Editing
High
CVE-2021-24208
WP Page Builder <= 1.2.3 - Multiple Stored Cross-Site scripting
Medium
CVE-2021-24246
WorkScout - Job Board WordPress Theme <= 2.0.31 - Stored Cross-Site Scripting
Medium
CVE-2021-24245
Stop Spammers <= 2021.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-20289
Exposure of class information in RESTEasy
High
CVE-2020-28736
Improper Restriction of XML External Entity Reference in Plone
High
CVE-2020-28735
SSRF attacks via tracebacks in Plone
High
CVE-2020-28734
Improper Restriction of XML External Entity Reference in Plone
High
CVE-2021-30130
Improper Certificate Validation in phpseclib
High
CVE-2021-30185
Indico Tampering with links (e.g. password reset) in sent emails
Medium
CVE-2021-24214
OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross-Site Scripting
High
CVE-2021-21423
Rebuild-bot workflow may allow unauthorised repository modifications
Critical
ghsa-prmc-5v5w-c465
Client TLS credentials sent raw to server in npm package nats
Low
CVE-2021-28163
Directory exposure in jetty
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-28164
Authorization Before Parsing and Canonicalization in jetty
High
CVE-2021-21388
Command Injection Vulnerability in systeminformation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.