Critical
CVE-2020-15362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-7679
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs
Critical
CVE-2020-7673
Code Injection in node-extend
Critical
CVE-2020-7674
Improper Input Validation in access-policy
Critical
CVE-2020-7675
Code Injection in cd-messenger
High
CVE-2020-7672
Code Injection in mosc
Medium
CVE-2021-32817
Insecure template handling in express-hbs
High
CVE-2021-32818
Insecure template handling in haml-coffee
High
CVE-2021-32819
Insecure template handling in Squirrelly
Critical
CVE-2021-25943
Prototype pollution in 101
Critical
CVE-2021-25941
Prototype Pollution in deep-override
Medium
CVE-2021-29624
Lack of protection against cookie tossing attacks in fastify-csrf
Low
ghsa-g2qj-pmxm-9f8f
User enumeration in authentication mechanisms
Low
ghsa-2frx-j9hj-6c65
User enumeration in authentication mechanisms
Medium
CVE-2021-32622
Improper file handling in matrix-react-sdk
Low
CVE-2021-32618
Open Redirect in Flask-Security-Too
Medium
CVE-2021-24313
WP Prayer <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24482
Related Posts for WordPress <= 2.0.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24335
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting
High
CVE-2021-24562
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress < 4.21.2 - Insecure Direct Object Reference
Critical
4280654a-9eab-4541-8b82-74086d37d928
CM Registration Pro <= 3.2.0 - PHP Object Injection
Medium
CVE-2021-24334
Instant Images – One Click Unsplash, Pixabay and Pexels Uploads <= 4.4.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24330
Funnel Builder by CartFlows <= 1.6.12 - Authenticated Stored Cross-Site scripting via FB Pixel ID and Google Analytics ID
Medium
CVE-2021-24319
Bello - Directory & Listing - < 1.6.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.