Critical
CVE-2021-40720
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2021-39864
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Critical
CVE-2021-42325
Froxlor SQL injection vulnerability
Medium
CVE-2021-41800
MediaWiki allows a denial of service
Medium
CVE-2021-21684
Stored XSS vulnerability in Jenkins Git Plugin
Medium
CVE-2021-21683
Path traversal vulnerability on Windows in Jenkins
Medium
CVE-2021-21682
Improper handling of equivalent directory names on Windows in Jenkins
High
CVE-2021-31605
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.
High
CVE-2021-32297
An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution.
Medium
CVE-2021-40824
Logic error in Matrix SDK for Android
Medium
CVE-2021-40347
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also
Low
CVE-2021-28566
Magento Information Disclosure vulnerability
Medium
CVE-2021-28567
Magento Improper Authorization vulnerability in the customers module
High
CVE-2021-40797
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authentica
Critical
CVE-2021-40494
A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.
High
CVE-2021-36020
Magento XML Injection vulnerability in the 'City' field
High
CVE-2021-36022
Magento XML Injection vulnerability in the Widgets Update Layout
Medium
CVE-2021-36012
Magento affected by a business logic error in the placeOrder graphql mutation
High
CVE-2021-36032
Magento is affected by an improper input validation vulnerability
Critical
CVE-2021-36028
Magento has an XML Injection vulnerability
Critical
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
High
CVE-2021-36024
Magento is affected by an os command injection via the Data collection endpoint
Critical
CVE-2021-36033
Magento XML Injection vulnerability in the Widgets Module
High
CVE-2021-36030
Magento allows attackers to alter the price of items
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.