Low
CVE-2021-41176
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filters
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
Medium
CVE-2021-28661
SilverStripe GraphQL Server permission checker not inherited by query subclass.
High
CVE-2021-22958
Server-Side Request Forgery vulnerability in concrete5
High
CVE-2021-41129
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Unrated
drupal-contrib-2021-033
drupal/file_extractor - SA-CONTRIB-2021-033
High
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
High
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
High
CVE-2021-32759
Data Flow Sanitation Issue Fix
High
CVE-2021-29487
October CMS auth bypass and account takeover
Medium
CVE-2021-37704
Exposed phpinfo() leadked via documentation files
High
Exploited in attacks
CVE-2021-32648
Account Takeover in Octobercms
High
CVE-2021-39173
Cachet vulnerable to forced reinstall
High
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
High
CVE-2021-37711
Authenticated server-side request forgery in file upload via URL.
High
CVE-2021-32752
Files or Directories Accessible to External Parties in ether/logs
High
CVE-2021-34551
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
Critical
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
High
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Critical
CVE-2021-30108
Server-Side Request Forgery in Feehi CMS
Unrated
drupal-contrib-2021-013
drupal/graphql - SA-CONTRIB-2021-013
Medium
CVE-2021-31779
Server-Side Request Forgery in yoast_seo
Critical
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Critical
CVE-2020-5777
Authentication bypass in MAGMI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.