High
CVE-2021-4131
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2021-4132
livehelperchat is vulnerable to Cross-site Scripting
High
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-44145
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi
Unrated
drupal-contrib-2022-002
drupal/simple_oauth - SA-CONTRIB-2022-002
Unrated
drupal-contrib-2022-001
drupal/super_login - SA-CONTRIB-2022-001
High
CVE-2021-23797
Path Traversal in http-server-node
High
CVE-2021-23450
Prototype Pollution in dojo
Medium
CVE-2021-44116
Cross-site Scripting in Anchor CMS
Medium
CVE-2021-45452
Directory-traversal in Django
High
CVE-2021-45116
Information disclosure in Django
High
CVE-2021-45115
Denial-of-service in Django
Medium
CVE-2022-23179
Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24839
SupportCandy <= 2.2.4 - Unauthenticated Arbitrary Ticket Deletion
Medium
CVE-2021-25106
Privacy Policy Generator, Terms & Conditions Generator - WPLegalPages <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-24928
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
Medium
CVE-2021-24878
SupportCandy <= 2.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24879
SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-44832
Improper Input Validation and Injection in Apache Log4j2
High
CVE-2021-3842
NLTK Vulnerable to REDoS
Critical
CVE-2022-24663
PHP Everywhere <= 2.0.3 - Remote Code Execution by Subscriber+ users via shortcode
Medium
CVE-2021-24880
SupportCandy <= 2.2.6 - Stored Cross-Site Scripting via Shortcode
Medium
CVE-2021-24843
SupportCandy <= 2.2.6 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
Medium
CVE-2021-25084
Advanced Cron Manager <= 2.4.1 - Subscriber+ Arbitrary Events/Schedules Creation/Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.