Medium
CVE-2021-42365
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-42364
Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-24753
Rich Reviews by Starfish <= 1.9.5 - SQL Injection
Medium
CVE-2021-24992
Buttonizer - Smart Floating Action Button <= 2.5.4 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-25007
MOLIE <= 0.5 - SQL Injection
Medium
CVE-2021-38356
NextScripts: Social Networks Auto-Poster <= 4.3.20 - Reflected Cross-Site Scripting
Medium
CVE-2021-23654
Improper Neutralization of Formula Elements in a CSV File in html-2-csv
Medium
CVE-2021-36919
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-20841
EC-CUBE Improper access control in Management screen
High
CVE-2021-20851
Browser and Operating System Finder <= 1.1 - Cross-Site Request Forgery
High
CVE-2021-40830
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40829
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-40828
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-41270
CSV Injection in symfony/serializer
High
CVE-2021-40831
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-41268
Cookie persistence after password changes in symfony/security-bundle
Critical
ghsa-r64m-qchj-hrjp
Webcache Poisoning in shopware/platform and shopware/core
Medium
CVE-2021-41267
Webcache Poisoning in symfony/http-kernel
High
CVE-2021-36917
Hide My WP <= 6.2.3 - Authorization Bypass
High
CVE-2021-36916
Hide My WP <= 6.2.3 - SQL Injection
Critical
CVE-2021-23433
Prototype Pollution in algoliasearch-helper
Critical
CVE-2021-43775
Arbitrary file reading vulnerability in Aim
High
CVE-2021-41281
Path traversal in Matrix Synapse
Medium
CVE-2021-25986
Cross-site Scripting in django-wiki
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.