High
CVE-2021-27290
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2021-23354
printf vulnerable to Regular Expression Denial of Service (ReDoS)
Critical
CVE-2020-7785
Command injection in node-ps
High
CVE-2020-28426
Command injection in kill-process-on-port
Critical
CVE-2021-23355
Command Injection in ps-kill
Critical
CVE-2021-23356
Code injection in kill-process-by-name
Critical
CVE-2021-25914
Prototype Pollution Vulnerability in object-collider
Critical
CVE-2020-28273
Prototype pollution in set-in
High
CVE-2021-21267
Regular Expression Denial-of-Service in npm schema-inspector
High
CVE-2021-25329
Potential remote code execution in Apache Tomcat
High
CVE-2021-46875
Cross-site scripting in eZ Platform Kernel
High
CVE-2021-25293
Out of bounds read in Pillow
Medium
CVE-2021-25292
Regular Expression Denial of Service (ReDoS) in Pillow
High
CVE-2021-25291
Out of bounds read in Pillow
High
CVE-2021-25290
Out-of-bounds Write in Pillow
Critical
CVE-2021-25289
Out of bounds write in Pillow
Medium
CVE-2021-24211
WordPress Related Posts <= 3.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24210
PhastPress <= 1.110 - Open Redirect
High
CVE-2021-4448
Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization
High
CVE-2021-21384
Null characters not escaped
Medium
CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
High
CVE-2021-26814
Improper Input Validation (RCE)
Medium
CVE-2021-22132
Insufficiently Protected Credentials in Elasticsearch
Medium
CVE-2020-7014
Privilege Escalation Flaw in Elasticsearch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.