Medium
CVE-2021-3377
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,518
Reset filters
Medium
CVE-2021-24033
react-dev-utils OS Command Injection in function `getProcessForPort`
Medium
CVE-2020-28498
Elliptic Uses a Broken or Risky Cryptographic Algorithm
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
Low
CVE-2021-21320
User content sandbox can be confused into opening arbitrary documents
Low
CVE-2021-21322
Prefix escape
Medium
CVE-2021-21353
Remote code execution via the `pretty` option.
Critical
CVE-2021-21321
Prefix escape
Medium
CVE-2021-27405
Regular expression Denial of Service in @progfay/scrapbox-parser
High
CVE-2021-27516
URIjs Hostname spoofing via backslashes in URL
High
CVE-2020-28496
Denial of service in three
High
CVE-2021-23341
Denial of service in prismjs
Medium
CVE-2021-23342
Docsify XSS Vulnerability
Medium
CVE-2020-8902
SSRF in Rendertron
Low
CVE-2021-21298
Path traversal in Node-Red
High
CVE-2021-21297
Prototype Pollution in Node-Red
High
Exploited in attacks
CVE-2021-21315
Command Injection Vulnerability
Low
CVE-2021-21310
Token verification bug in next-auth
Medium
CVE-2021-23327
XSS in apexcharts
Critical
CVE-2021-27185
Command injection in samba-client
Medium
CVE-2020-26299
File System Bounds Escape
Medium
CVE-2021-21306
Regular Expression Denial of Service (REDoS) in Marked
High
CVE-2021-21304
Prototype Pollution in Dynamoose
Medium
CVE-2021-3189
Open redirect in Slashify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.