Medium
CVE-2021-39864
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Critical
CVE-2021-42325
Froxlor SQL injection vulnerability
Medium
CVE-2021-41800
MediaWiki allows a denial of service
Low
CVE-2021-28566
Magento Information Disclosure vulnerability
Medium
CVE-2021-28567
Magento Improper Authorization vulnerability in the customers module
High
CVE-2021-36020
Magento XML Injection vulnerability in the 'City' field
High
CVE-2021-36022
Magento XML Injection vulnerability in the Widgets Update Layout
Medium
CVE-2021-36012
Magento affected by a business logic error in the placeOrder graphql mutation
High
CVE-2021-36032
Magento is affected by an improper input validation vulnerability
Critical
CVE-2021-36028
Magento has an XML Injection vulnerability
Critical
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
High
CVE-2021-36024
Magento is affected by an os command injection via the Data collection endpoint
Critical
CVE-2021-36033
Magento XML Injection vulnerability in the Widgets Module
High
CVE-2021-36030
Magento allows attackers to alter the price of items
High
CVE-2021-36029
Magento improper authorization vulnerability
High
CVE-2021-36031
Magento Path Traversal vulnerability via the `theme[preview_image]` parameter
High
CVE-2021-36043
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension
Critical
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
High
CVE-2021-36041
Magento vulnerable to file upload attack
Medium
CVE-2021-36039
Magento discloses sensitive information
High
CVE-2021-36034
Magento affected by remote code execution via a file upload
Critical
CVE-2021-36040
Magento has a file extension restrictions bypass
Medium
CVE-2021-36038
Magento discloses sensitive information via the Multishipping Module
Medium
CVE-2021-36037
Magento is affected by an improper authorization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.