High
CVE-2021-24347
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2020-7633
apiconnect-cli-plugins vulnerable to OS Command Injection
High
CVE-2021-20087
Prototype Pollution in jquery-deparam
Critical
CVE-2021-31597
Improper Certificate Validation in xmlhttprequest-ssl
Medium
CVE-2021-23364
Regular Expression Denial of Service in browserslist
High
CVE-2021-20086
Prototype Pollution in jquery-bbq
High
CVE-2021-23386
Potential memory exposure in dns-packet
Medium
CVE-2020-12699
Open redirect in direct_mail
Medium
CVE-2020-12697
Denial of service in direct_mail
High
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
Medium
CVE-2021-47957
Cookie Law Bar <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24504
WP LMS – Best WordPress LMS Plugin <= 1.1.5 - Cross-Site Scripting
Medium
CVE-2021-24343
iFlyChat – WordPress Chat <= 4.6.4 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24342
JNews - WordPress Newspaper Magazine Blog AMP Theme < 8.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24344
Easy Preloader <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-33513
Cross-site scripting in Plone
Medium
CVE-2021-33512
Cross-site scripting in Plone
High
CVE-2021-33511
Server-Side Request Forgery in Plone
Medium
CVE-2021-33510
Server-Side Request Forgery in Plone
Critical
CVE-2021-33509
Incorrect Permission Assignment for Critical Resource in Plone
Medium
CVE-2021-33508
Cross-site scripting in Plone
Medium
CVE-2021-31779
Server-Side Request Forgery in yoast_seo
High
CVE-2020-11972
Deserialization of Untrusted Data in Apache Camel RabbitMQ
Medium
CVE-2020-1960
Command injection in Apache Flink
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.