High
CVE-2021-33338
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2021-33339
Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting
Medium
CVE-2021-33336
Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-35463
Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module
Medium
CVE-2021-33337
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module
Medium
CVE-2021-37916
Joplin vulnerable to Cross-site Scripting in notes
Medium
CVE-2021-33326
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module
Medium
CVE-2021-33320
Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate
High
CVE-2021-33321
Liferay Portal and Liferay DXP insecure default configuration
Medium
CVE-2021-33327
Liferay Portal and Liferay DXP does not properly check user permission
High
CVE-2021-33323
Liferay Portal and Liferay DXP autosaves form data for other users to see
Medium
CVE-2021-33324
Liferay Portal and Liferay DXP Don't Check Permissions of Pages
Medium
CVE-2021-33328
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page
Medium
CVE-2021-33325
Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
Medium
CVE-2021-33333
Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions
Medium
CVE-2021-33332
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-33331
Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs
Medium
CVE-2021-33334
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
Medium
CVE-2020-22765
NukeViet Cross-site Scripting via the editor in the News module
Critical
CVE-2020-21809
NukeViet SQL Injection vulnerability
Critical
CVE-2020-21808
NukeViet SQL Injection vulnerability via topicsid parameter
High
CVE-2021-34802
Improper Privilege Management in Neo4j Graph Database
Medium
CVE-2021-22145
Generation of Error Message Containing Sensitive Information in Elasticsearch
Medium
CVE-2020-18151
ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.