High
CVE-2021-22044
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Medium
CVE-2020-28957
Foxlor cross-site scripting (XSS) vulnerability
Critical
CVE-2021-42740
Improper Neutralization of Special Elements used in a Command in Shell-quote
Medium
CVE-2021-2471
Incorrect Authorization in MySQL Connector Java
High
CVE-2021-3869
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
High
CVE-2021-3846
Unrestricted File Upload vulnerability in Firefly III
Medium
CVE-2021-32609
Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (incl
High
CVE-2021-41971
Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with
Critical
CVE-2021-3878
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
Critical
CVE-2021-40720
Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously craf
Medium
CVE-2021-39864
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Critical
CVE-2021-42325
Froxlor SQL injection vulnerability
Medium
CVE-2021-41800
MediaWiki allows a denial of service
Medium
CVE-2021-21684
Stored XSS vulnerability in Jenkins Git Plugin
Medium
CVE-2021-21683
Path traversal vulnerability on Windows in Jenkins
Medium
CVE-2021-21682
Improper handling of equivalent directory names on Windows in Jenkins
High
CVE-2021-31605
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.
High
CVE-2021-32297
An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution.
Medium
CVE-2021-40824
Logic error in Matrix SDK for Android
Medium
CVE-2021-40347
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also
Low
CVE-2021-28566
Magento Information Disclosure vulnerability
Medium
CVE-2021-28567
Magento Improper Authorization vulnerability in the customers module
High
CVE-2021-40797
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authentica
Critical
CVE-2021-40494
A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.