High
CVE-2021-34084
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2021-34083
Command injection in google-it
High
CVE-2021-34082
OS Command Injection in proctree
Critical
CVE-2020-28246
Server-Side Template Injection in formio
High
CVE-2021-34081
OS Command Injection in gitsome
High
CVE-2021-34080
OS Command injection in ssl-utils
High
CVE-2021-34079
Command injection in docker-tester
High
CVE-2021-34078
OS Command Injection in lifion-verify-deps
High
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
Medium
CVE-2022-29256
sharp vulnerable to Command Injection in post-installation over build environment
High
CVE-2022-25878
Prototype Pollution in protobufjs
Medium
CVE-2021-4231
Angular vulnerable to Cross-site Scripting
Medium
CVE-2022-29229
Missing Cryptographic Step in cassproject
Medium
CVE-2021-37939
Kibana Sensitive Data Disclosure
High
CVE-2021-26073
Broken Authentication in Atlassian Connect Express
High
CVE-2022-29219
AttesterSlashing number overflow
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2021-20088
mootools-more vulnerable to prototype pollution
High
CVE-2019-19729
bson-objectid contains Improper input validation
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Medium
CVE-2022-29172
Cross-site Scripting in Auth0 Lock
High
CVE-2021-42057
Obsidian Dataview vulnerable to code injection due to unsafe eval
Critical
CVE-2021-42740
Improper Neutralization of Special Elements used in a Command in Shell-quote
Critical
CVE-2021-38148
Obsidian does not require user confirmation for non-http/https URLs.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.