High
ghsa-7vwg-39h8-8qp8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-21364
Generated Code Contains Local Information Disclosure Vulnerability
Low
CVE-2021-21363
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
Medium
CVE-2021-24176
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-21371
Execution of untrusted code through config file
Low
CVE-2021-21265
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
Medium
CVE-2020-27223
DOS vulnerability for Quoted Quality CSV headers
High
CVE-2021-24174
Database Backups <= 1.2.2.6 - Cross-Site Request Forgery
Medium
CVE-2021-21295
Possible request smuggling in HTTP/2 due missing validation
Medium
CVE-2021-21360
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
High
CVE-2021-21361
Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin
Medium
CVE-2021-21337
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
High
CVE-2021-21336
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Medium
CVE-2020-28498
Elliptic Uses a Broken or Risky Cryptographic Algorithm
High
ghsa-qxx8-292g-2w66
Improper Authentication
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
Critical
CVE-2021-24175
Plus Addons for Elementor Page Builder <= 4.1.6 - Authentication Bypass
Critical
25971f3f-4816-416c-9de9-feb6326fe948
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection
Medium
001a7d43-4b00-42e9-bb0c-94a9d5721166
BuddyPress <= 7.2.0 - Authorization Bypass to Private Message Disclosure
High
CVE-2021-24295
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.153.3 - Unauthenticated Blind SQL Injection
High
CVE-2021-20678
Paid Memberships Pro <= 2.5.5 - Authenticated SQL Injection
Critical
CVE-2021-24171
WooCommerce Upload Files <= 59.3 - Arbitrary File Upload
Low
CVE-2021-21331
Local Information Disclosure Vulnerability
Unrated
drupal-contrib-2021-004
drupal/webform - SA-CONTRIB-2021-004
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.