Medium
CVE-2021-24635
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2021-24493
Shopp <= 1.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2021-24510
MF Gig Calendar <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-36832
Icegram <= 2.0.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24652
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Unauthorized Access Controls
High
CVE-2021-24491
Fileviewer <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2020-18699
Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Critical
CVE-2020-18698
Lin-CMS-Flask vulnerable to Improper Authentication
Unrated
CVE-2020-18701
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token up
Critical
CVE-2020-18705
Improper Restriction of XML External Entity Reference in Quokka
Critical
CVE-2020-18704
Unrestricted Upload of File with Dangerous Type in django-widgy
Critical
CVE-2020-18703
Improper Restriction of XML External Entity Reference in Quokka
Medium
CVE-2020-18702
Cross Site Scripting (XSS) in Quokka
Medium
CVE-2021-38315
SP Project & Document Manager <= 4.25 - Reflected Cross-Site Scripting
Medium
CVE-2021-34641
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
Medium
CVE-2021-35936
Missing Authorization in Apache Airflow
Medium
CVE-2021-23423
Path Traversal in bikshed
High
CVE-2021-23422
OS Command Injection in bikeshed
Medium
CVE-2021-24623
WordPress Advanced Ticket System, Elite Support Helpdesk <= 1.0.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-37598
WP Cerber < 8.9.3 - Access Bypass Control
Medium
CVE-2021-4423
RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass
Medium
e298663b-746c-40fc-a2ca-cb35d472baab
Amazon Auto Links <= 4.6.19 - Reflected Cross-Site Scripting
Medium
CVE-2021-24431
Language Bar Flags <= 1.0.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2021-4420
Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.