High
CVE-2021-36029
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
High
CVE-2021-36031
Magento Path Traversal vulnerability via the `theme[preview_image]` parameter
High
CVE-2021-36043
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension
Critical
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
High
CVE-2021-36041
Magento vulnerable to file upload attack
Medium
CVE-2021-36039
Magento discloses sensitive information
High
CVE-2021-36034
Magento affected by remote code execution via a file upload
Critical
CVE-2021-36040
Magento has a file extension restrictions bypass
Medium
CVE-2021-36038
Magento discloses sensitive information via the Multishipping Module
Medium
CVE-2021-36037
Magento is affected by an improper authorization vulnerability
High
CVE-2021-36044
Magento affected by a server-side denial-of-service using a GraphQL field
High
CVE-2021-21678
Jenkins SAML Plugin allows bypassing CSRF protection for any URL
High
CVE-2021-21677
RCE vulnerability in Jenkins Code Coverage API Plugin
High
CVE-2021-21679
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
Medium
CVE-2021-21681
Password stored in plain text by Jenkins Nomad Plugin
High
CVE-2021-21680
XXE vulnerability in Jenkins Nested View Plugin
High
CVE-2021-40085
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.
High
CVE-2021-38598
OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca
High
CVE-2021-28490
Cross-Site Request Forgery in OWASP CSRFGuard
Critical
CVE-2020-28088
Jeecg-Boot CMS arbitrary file upload vulnerability
Critical
CVE-2021-38148
Obsidian does not require user confirmation for non-http/https URLs.
Medium
CVE-2020-22330
Subrion Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2021-3642
Observable Discrepancy in Wildfly Elytron
High
CVE-2021-33335
Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.