High
ghsa-4whq-r978-2x68
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-29486
cumulative-distribution-function Infinite Loop vulnerability
Medium
CVE-2021-21264
Bypass of fix for CVE-2020-26231, Twig sandbox escape
Critical
CVE-2020-36326
Object injection in PHPMailer/PHPMailer
High
CVE-2021-31409
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
CVE-2021-24296
WP Customer Reviews <= 3.5.5 - Authenticated Stored Cross-Site Scripting
Medium
a0aa2a10-da05-41e4-bbfa-938341919b5d
Easy Digital Downloads <= 2.10.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24301
Hotjar Connecticator <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24297
Goto - Tour & Travel WordPress Theme < 2.1 - Reflected Cross-Site Scripting
Medium
bd4a1fd2-8831-482d-8ae3-fb78c2657b86
WP DoNotTrack <= 0.8.8 - Authenticated (Admin+) Stored Cross-Site Scripting
High
7a94229a-6316-48e7-bcaa-23cb2cc047b4
Activity Log 2.3.5 - 2.6.1 - SQL Injection
Low
CVE-2021-24419
WP YouTube Lyte <= 1.7.15 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-28359
Cross-site Scripting in Apache Airflow
High
CVE-2020-13952
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated
High
CVE-2021-29460
Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby
Medium
CVE-2020-5421
Improper Input Validation in Spring Framework
Medium
CVE-2020-5412
Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix
High
CVE-2018-11765
Improper Authentication in Apache Hadoop
Medium
CVE-2020-10687
HTTP Request Smuggling in Undertow
High
CVE-2020-10705
Allocation of Resources Without Limits or Throttling in Undertow
Medium
CVE-2020-10719
HTTP Request Smuggling in Undertow
High
CVE-2020-28052
Logic error in Legion of the Bouncy Castle BC Java
High
ed40b874-68e2-49f3-95b0-653600394e78
WordPress Download Manager < 3.1.19 - Arbitrary File Upload
Medium
CVE-2021-24315
GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.