Medium
CVE-2021-24185
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-24183
Tutor LMS <= 1.8.2 - SQL Injection via tutor_quiz_builder_get_question_form
High
CVE-2021-24184
Tutor LMS – eLearning and online course solution <= 1.7.6 - Unprotected AJAX including Privilege Escalation
Medium
CVE-2021-24180
Related Posts for WordPress <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24196
Social Slider Widget <= 1.8.4 - Reflected Cross-Site Scripting
High
CVE-2021-24173
VM Backups <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2021-24172
VM Backups <= 1.0 - Cross-Site Request Forgery
Medium
ghsa-pjj4-jjgc-h3r8
Authenticated remote code execution
Low
CVE-2021-32710
Potential Session Hijacking
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
High
CVE-2021-23352
Madge vulnerable to command injection
Critical
ghsa-4wv4-mgfq-598v
Code injection in nobelprizeparser
Medium
CVE-2021-21368
Prototype poisoning
Medium
CVE-2021-21366
Misinterpretation of malicious XML input
Medium
ghsa-xmh9-rg6f-j3mr
Verification flaw in Solid identity-token-verifier
Medium
CVE-2020-17551
Cross-site scripting (XSS)
Medium
CVE-2021-28088
Cross-site scripting (XSS)
High
CVE-2020-13949
Uncontrolled Resource Consumption in Apache Thrift
Medium
CVE-2021-20262
Keycloak Missing authentication for critical function
High
CVE-2021-23353
jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
Medium
CVE-2020-13959
Cross-site scripting (XSS) in Apache Velocity Tools
Medium
CVE-2021-3377
ansi_up cross-site scripting vulnerability
Medium
CVE-2021-24033
react-dev-utils OS Command Injection in function `getProcessForPort`
Medium
CVE-2021-46876
/user/sessions endpoint allows detecting valid accounts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.