High
CVE-2021-27912
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
Medium
CVE-2021-36787
Cross-site Scripting in the femanager TYPO3 extension
Medium
CVE-2021-36788
Cross-site Scripting in the yoast_seo TYPO3 extension
High
CVE-2021-36786
Sensitive Data Exposure in miniorange_saml
Critical
CVE-2021-23420
Deserialization of Untrusted Data in codeception/codeception
High
CVE-2021-3689
Use of Insufficiently Random Values in yiisoft/yii2-dev
Medium
CVE-2021-3692
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
Medium
CVE-2020-22392
Cross Site Scripting in Subrion CMS
High
CVE-2021-36804
Malicious password-reset in Akaunting
Medium
CVE-2021-3680
Inadequate Encryption Strength in showdoc
Critical
CVE-2019-19208
Code injection in codiad
High
CVE-2021-39166
Improper Neutralization of Text-Values in Object Version Preview
High
CVE-2021-39170
Improper Encoding or Escaping of Output in Asset Metadata Component
High
CVE-2021-38623
Improper Resource Shutdown or Release in TYPO3 extension
Medium
CVE-2021-36785
Cross-site Scripting in TYPO3 extension
High
CVE-2021-32758
Layout XML Arbitrary Code Fix
High
CVE-2021-32759
Data Flow Sanitation Issue Fix
Medium
CVE-2021-38713
Cross-site scripting in imgURL
Critical
CVE-2021-25955
Dolibarr Cross-site Scripting vulnerability
Medium
CVE-2020-19709
Cross-site scripting in feehicms
Medium
CVE-2021-3734
Improper Restriction of Rendered UI Layers or Frames in yourls
High
CVE-2021-39136
Cross-site scripting vulnerability in file upload
Medium
CVE-2021-37709
Insecure direct object reference of log files of the Import/Export feature
High
CVE-2021-37708
Command injection in mail agent settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.