High
CVE-2021-32840
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filters
High
CVE-2021-22570
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
Medium
CVE-2022-0159
orchardcore is vulnerable to Cross-site Scripting
High
CVE-2024-21909
Denial of service in CBOR library
High
CVE-2022-22691
Umbraco Persistent Password Reset Poison
High
CVE-2022-22690
Umbraco ApplicationURL Overwrite
Medium
CVE-2022-0274
Cross-site Scripting OrchardCore.Application.Cms.Targets
High
CVE-2021-43045
Allocation of Resources Without Limits or Throttling in Apache Avro
High
CVE-2021-43853
AjaxNetProfessional deserializes arbitrary JavaScript objects
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
Critical
Exploited in attacks
CVE-2021-23758
Remote Code Execution in AjaxNetProfessional
Medium
CVE-2020-29457
Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core
High
CVE-2021-25976
Cross-Site Request Forgery in PiranhaCMS
Critical
CVE-2021-43569
Improper Verification of Cryptographic Signature in starkbank-ecdsa
High
ghsa-9wx7-jrvc-28mm
Signature verification vulnerability in Stark Bank ecdsa libraries
High
CVE-2021-41238
Missing Authorization with Default Settings in Dashboard UI
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Medium
CVE-2021-25977
Cross-site Scripting in PiranhaCMS
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Medium
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Medium
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
Medium
CVE-2021-41355
Credential Disclosure in System.DirectoryServices.Protocols
Critical
CVE-2021-31819
Remote Code Execution in Halibut
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.