Medium
CVE-2021-39338
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-39337
job-portal <= 0.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24869
WP Fastest Cache < 0.9.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2021-24870
WP Fastest Cache < 0.9.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-39349
Author Bio Box <= 3.3.1 - Authenticated Stored Cross-Site Scripting
Medium
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
High
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
ghsa-j23j-q57m-63v3
Denial of service in DataCommunicator class in Vaadin 8
Medium
CVE-2021-33609
Denial of service in DataCommunicator class in Vaadin 8
Unrated
drupal-contrib-2021-043
drupal/loft_data_grids - SA-CONTRIB-2021-043
Medium
CVE-2021-26272
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
Critical
CVE-2021-25916
Prototype pollution vulnerability in 'patchmerge'
High
CVE-2021-38346
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal
High
CVE-2021-24998
Simple JWT Login <= 3.2.1 - Insecure Password Creation
High
CVE-2021-24864
WP Cloudy <= 4.4.9 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24598
Testimonial < 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-38344
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting
Medium
CVE-2021-24802
Colorful Categories < 2.0.15 - Cross-Site Request Forgery
High
CVE-2021-24867
AccessPress Anonymous Post = 2.8.0 - Backdoored
Critical
CVE-2019-10061
OS Command Injection in node-opencv
Medium
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Medium
CVE-2021-28661
SilverStripe GraphQL Server permission checker not inherited by query subclass.
High
CVE-2021-40978
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in h
Medium
CVE-2021-36150
Cross-site Scripting in SilverStripe Framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.