High
CVE-2021-39166
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-39170
Improper Encoding or Escaping of Output in Asset Metadata Component
Medium
f4e8ad18-fa25-414c-8a94-9ad9bd3c2e31
XO Event Calendar <= 2.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-39322
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
Medium
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2021-33849
Zoho CRM Lead Magnet <= 1.7.2.4 - Cross-Site Scripting
High
CVE-2021-38312
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion
Medium
1f38aca5-0d69-421e-a3f2-d12cd593a88a
Easy Social Icons <= 3.0.9 - Reflected Cross-Site Scripting
Low
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Low
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
High
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
High
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Medium
CVE-2021-4372
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
Medium
afd67c36-31ec-4e44-bad5-a018834ccfbc
qTranslate X <= 3.4.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
8a95633f-b5e1-4a92-b566-90fb05a289ce
Software License Manager <= 4.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-4353
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
Medium
23132298-f1de-4085-a76f-f007b8b7de15
WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting
Medium
CVE-2021-39320
underConstruction <= 1.18 - Reflected Cross-Site Scripting
High
CVE-2021-38623
Improper Resource Shutdown or Release in TYPO3 extension
Medium
CVE-2021-36785
Cross-site Scripting in TYPO3 extension
High
CVE-2020-22403
Cross-Site Request Forgery in express-cart
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.