Critical
CVE-2021-4340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-41188
Authenticated Stored XSS in shopware/shopware
Medium
CVE-2021-25977
Cross-site Scripting in PiranhaCMS
Critical
CVE-2021-40865
Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm
Critical
CVE-2021-38294
Command injection leading to Remote Code Execution in Apache Storm
Medium
CVE-2021-36843
Social Media Flying Icons | Floating Social Media Icon <= 4.3.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24917
WPS Hide Login <= 1.9.0 - Hidden Login Page Location Disclosure
Medium
CVE-2021-24876
Registrations for The Events Calendar <= 2.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Medium
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Medium
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
Critical
CVE-2021-41078
Nameko Arbitrary code execution due to YAML deserialization
Critical
CVE-2021-42343
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults
Medium
CVE-2021-24745
About Author Box < 1.0.2 - Cross-Site Scripting
High
CVE-2021-24889
Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection
Medium
CVE-2021-24842
Bulk Datetime Change <= 1.11 - Missing Authorisation
High
CVE-2021-39333
HashThemes Demo Importer <= 1.1.1 - Missing Authorization to Database Wipe
Medium
CVE-2021-33988
Cross Site Scripting in Microweber
Critical
CVE-2021-41745
Showdoc File Upload Vulnerability
Medium
CVE-2020-23049
Cross-site scripting in forkcms
Low
CVE-2021-41176
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Medium
CVE-2021-39340
Notification – Custom Notifications and Alerts for WordPress <= 7.2.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24883
Popup Anything <= 2.0.3 - Contributor+ Stored Cross-Site Scripting
Medium
b28ba929-d057-43f9-b839-62347c06c1bd
WP Spell Check <= 9.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.