Medium
CVE-2021-21338
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-24213
GiveWP 2.4.0 - 2.9.7 - Reflected Cross Site Scripting
Critical
CVE-2021-24215
Controlled Admin Access <= 1.5.1 - Improper Access Control & Privilege Escalation
Medium
CVE-2021-24891
Elementor Website Builder <= 3.4.7 - DOM-based Cross-Site Scripting
Medium
CVE-2021-21351
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21350
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21349
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-21348
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
Medium
CVE-2021-21347
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21346
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21345
XStream is vulnerable to a Remote Command Execution attack
Medium
CVE-2021-21344
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21343
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
Medium
CVE-2021-21342
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-21341
XStream can cause a Denial of Service.
High
CVE-2018-14550
Out-of-bounds write in libpng
High
ceef080c-3d3b-494d-8cfa-fe9724b9207f
SecuPress Free and SecuPress Pro <= 1.4.12 - Unauthenticated Arbitrary IP Ban
Medium
CVE-2021-28957
lxml vulnerable to Cross-Site Scripting
Critical
CVE-2021-24212
WooCommerce Help Scout <= 2.9.1 - Arbitrary File Upload to Remote Code Execution
Medium
CVE-2021-24320
Directory & Listing < 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-4392
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24238
Realteo < 1.2.4 - Missing Authorization
Critical
CVE-2021-23344
total.js Remote Code Execution Vulnerability
High
CVE-2021-28092
Regular Expression Denial of Service (ReDoS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.