High
CVE-2020-25699
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2020-25701
Privilage Escalation in moodle
High
CVE-2020-25698
Improper Access Control in moodle
Medium
CVE-2020-25700
SQL Injection in moodle
Medium
CVE-2021-20280
Cross-site scripting (XSS) and Server side request forgery (SSRF) in moodle
Critical
CVE-2021-28381
SQL injection in vhs (aka VHS: Fluid ViewHelpers)
Critical
Exploited in attacks
CVE-2021-3129
Unauthenticated remote code execution in Ignition
Medium
CVE-2021-3271
Stored cross-site scripting in PressBooks
Medium
CVE-2021-28099
Insecure temporary file in Netflix OSS Hollow
High
CVE-2020-7774
Prototype Pollution in y18n
High
CVE-2021-24328
WP Login Security and History <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-28121
Virtual Robots.txt < 1.10 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24225
Advanced Booking Calendar <= 1.6.6 - Reflected Cross-Site Scripting via calId Parameter
Medium
CVE-2021-21333
HTML injection in email and account expiry notifications
Medium
CVE-2021-21332
Cross-site scripting (XSS) vulnerability in the password reset endpoint
Medium
CVE-2021-27884
Weak JSON Web Token in yapi-vendor
Critical
CVE-2021-24229
Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting
High
CVE-2021-24230
Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery
Medium
CVE-2021-24226
AccessAlly <= 3.5.6 - Information Exposure
Critical
CVE-2021-24222
WP-Curriculo Vitae Free <= 6.3 - Arbitrary File Upload
Critical
CVE-2021-24228
Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting
High
CVE-2021-24221
Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode
High
CVE-2021-24231
Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery
High
CVE-2021-24224
Easy Form Builder <= 1.0 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.