Medium
CVE-2021-21661
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-21666
Cross-site scripting in Jenkins Kiuwan Plugin
Critical
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
Unrated
drupal-contrib-2021-017
drupal/block_content_revision_ui - SA-CONTRIB-2021-017
Unrated
drupal-contrib-2021-016
drupal/linky_revision_ui - SA-CONTRIB-2021-016
Unrated
drupal-contrib-2021-015
drupal/ctools - SA-CONTRIB-2021-015
Medium
CVE-2021-24426
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting
Medium
CVE-2021-24427
W3 Total Cache <= 2.1.2 Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-34620
WP Fluent Forms < 3.6.67 - Stored Cross-Site Scripting
Critical
CVE-2021-24385
Filebird 4.7.3 - Unauthenticated SQL Injection
Medium
CVE-2021-24420
Request a Quote <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-10688
Cross-site scripting in RESTEasy
High
CVE-2021-20293
Cross-Site Scripting
Medium
CVE-2021-31811
Uncontrolled memory consumption
Medium
CVE-2021-31812
Infinite Loop in Apache PDFBox
High
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Medium
CVE-2021-24406
wpForo Forum <= 1.9.6 - Open Redirect
Medium
e9fc118e-f402-4042-85b0-2175cb0e3048
10Web Map Builder for Google Maps <= 1.0.69 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24386
WP SVG Images <= 3.3 - Authenticated (author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2021-24388
Vik Rent Car <= 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24389
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24407
Jannah <= 5.4.4 - Reflected Cross-Site Scripting
High
CVE-2021-34619
WooCommerce Stock Manager <= 2.5.7 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
d0586453-76ec-4ec9-9965-780af7cb31ec
Async Javascript <= 2.20.12.09 - Authenticated (Admin+) Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.