Critical
CVE-2021-32671
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Unrated
drupal-contrib-2021-014
drupal/openid_connect - SA-CONTRIB-2021-014
High
CVE-2021-33563
Improper rate limiting in Koel
Medium
CVE-2021-33829
Drupal core - SA-CORE-2021-003
Medium
CVE-2020-12699
Open redirect in direct_mail
Medium
CVE-2020-12697
Denial of service in direct_mail
Critical
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Low
ghsa-g2qj-pmxm-9f8f
User enumeration in authentication mechanisms
Low
ghsa-2frx-j9hj-6c65
User enumeration in authentication mechanisms
Medium
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security
Unrated
drupal-contrib-2021-008
drupal/facets - SA-CONTRIB-2021-008
Unrated
drupal-contrib-2021-007
drupal/gutenberg - SA-CONTRIB-2021-007
Medium
CVE-2020-5776
Cross-Site Request Forgery in MAGMI
Critical
CVE-2020-5777
Authentication bypass in MAGMI
High
CVE-2020-23960
Cross-Site Request Forgery in ForkCMS
High
CVE-2020-35700
SQL Injection in librenms
Medium
CVE-2021-21264
Bypass of fix for CVE-2020-26231, Twig sandbox escape
Critical
CVE-2020-36326
Object injection in PHPMailer/PHPMailer
High
CVE-2021-29460
Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby
Critical
CVE-2021-30492
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
High
CVE-2021-29472
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
Medium
CVE-2021-21365
Cross-Site Scripting in Bootstrap Package
Unrated
drupal-contrib-2021-006
drupal/samlauth - SA-CONTRIB-2021-006
Critical
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.