Critical
CVE-2021-23376
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-23381
Command Injection in killing
High
CVE-2021-23379
Command injection in portkiller
High
CVE-2021-23375
Command Injection in psnode
Medium
CVE-2021-31712
Cross-site Scripting in React Draft Wysiwyg
High
CVE-2021-20085
Prototype Pollution in backbone-query-parameters
Critical
CVE-2021-28860
Prototype Pollution in mixme
High
CVE-2021-29489
Options structure open to Cross-site Scripting if passed unfiltered
High
ghsa-qrmm-w4v4-q7f8
Unauthorized access through URL manipulation
High
CVE-2021-31411
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Medium
ghsa-c57f-4vp2-jqhm
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
High
b6b68e35-ecfb-4876-8fee-c389077b2b4a
Zlick Paywall < 2.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24302
Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24300
PickPlugins Product Slider for WooCommerce <= 1.13.21 - Reflected Cross-Site Scripting
High
CVE-2021-31542
Path Traversal in Django
Critical
CVE-2021-31800
Path traversal in impacket
Medium
CVE-2021-24305
Watcheezy Live chat plugin for WordPress <= 2.0 - Stored Cross-Site Scripting
High
e27634f8-493b-4edb-a0c7-1bc8890b70f0
Parcel Tracker eCourier <= 1.0.1 - Cross-Site Request Forgery
High
CVE-2021-4447
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
High
469a702f-033a-40de-b725-b0ad4f8e92e8
Ship To eCourier <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-4446
Essential Addons for Elementor <= 4.6.4 - Missing Authorization
Medium
01e1b22f-9622-433f-bada-23d118dc3800
Simple Admin Language Change <= 2.0.1 - Authorization Bypass
High
CVE-2020-28499
Prototype Pollution in merge
Critical
CVE-2020-28502
xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.