High
CVE-2021-26813
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2021-27923
Pillow Denial of Service by Uncontrolled Resource Consumption
High
CVE-2021-27922
Pillow Uncontrolled Resource Consumption
High
CVE-2021-27921
Pillow Denial of Service by Uncontrolled Resource Consumption
Low
CVE-2021-21320
User content sandbox can be confused into opening arbitrary documents
Low
CVE-2021-21322
Prefix escape
Medium
CVE-2021-21353
Remote code execution via the `pretty` option.
Critical
CVE-2021-21321
Prefix escape
Medium
CVE-2021-24170
User Profile Picture <= 2.4.0 - Sensitive Information Disclosure
Medium
CVE-2021-24169
Advanced Order Export For WooCommerce <= 3.1.7 - Reflected Cross-Site Scripting
High
CVE-2021-26119
Sandbox escape through template_object in smarty
Medium
CVE-2021-27405
Regular expression Denial of Service in @progfay/scrapbox-parser
High
CVE-2021-27516
URIjs Hostname spoofing via backslashes in URL
High
CVE-2020-28496
Denial of service in three
High
CVE-2021-23341
Denial of service in prismjs
Medium
CVE-2021-23342
Docsify XSS Vulnerability
Medium
CVE-2020-8902
SSRF in Rendertron
Medium
CVE-2021-4425
Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4422
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
High
CVE-2021-4373
Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import
Medium
CVE-2021-4417
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4414
Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4413
Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4407
Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.