Medium
CVE-2021-27676
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-28055
Predictable CSRF tokens in centreon/centreon
Critical
CVE-2021-30108
Server-Side Request Forgery in Feehi CMS
High
CVE-2021-31777
SQL Injection in t3/dce
Medium
CVE-2021-27672
SQL Injection in tribalsystems/zenario
Medium
CVE-2021-31778
Cross-site scripting in media2click
Medium
CVE-2021-27673
reflected XSS in tribalsystems/zenario
Critical
CVE-2021-3007
Remote code execution in zendframework and laminas-http
Medium
CVE-2021-20683
Cross-site Scripting (XSS) in baserCMS
High
CVE-2021-20682
OS Command Injection in baserCMS
Medium
CVE-2021-20681
Cross-site Scripting (XSS) in baserCMS
Medium
CVE-2020-1719
Privilege Context Switching Error in wildlfy
High
CVE-2021-23391
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
High
CVE-2021-32673
Remote Command Execution in reg-keygen-git-hash-plugin
High
CVE-2021-33571
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Medium
CVE-2021-33203
Path Traversal in Django
Critical
CVE-2021-24384
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection
Medium
CVE-2021-4418
Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4412
WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4410
Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4402
Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
High
CVE-2015-7806
Form Manager <= 1.7.2 - Authenticated Remote Command Execution
Medium
CVE-2021-32670
Reflected cross-site scripting issue in Datasette
Critical
CVE-2021-25946
Prototype pollution in nconf-toml
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.