Low
ghsa-fxq4-r6mr-9x64
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2021-24236
Imagements <= 1.2.5 - Arbitrary File Upload
Medium
CVE-2021-24207
WP Page Builder <= 1.2.3 - Insecure Default to Unauthorized Page Editing
High
CVE-2021-24208
WP Page Builder <= 1.2.3 - Multiple Stored Cross-Site scripting
Medium
CVE-2021-24246
WorkScout - Job Board WordPress Theme <= 2.0.31 - Stored Cross-Site Scripting
Medium
CVE-2021-24245
Stop Spammers <= 2021.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-20289
Exposure of class information in RESTEasy
High
CVE-2020-28736
Improper Restriction of XML External Entity Reference in Plone
High
CVE-2020-28735
SSRF attacks via tracebacks in Plone
High
CVE-2020-28734
Improper Restriction of XML External Entity Reference in Plone
High
CVE-2021-30130
Improper Certificate Validation in phpseclib
High
CVE-2021-30185
Indico Tampering with links (e.g. password reset) in sent emails
Medium
CVE-2021-24214
OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross-Site Scripting
High
CVE-2021-21423
Rebuild-bot workflow may allow unauthorised repository modifications
Critical
ghsa-prmc-5v5w-c465
Client TLS credentials sent raw to server in npm package nats
Low
CVE-2021-28163
Directory exposure in jetty
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-28164
Authorization Before Parsing and Canonicalization in jetty
High
CVE-2021-21388
Command Injection Vulnerability in systeminformation
High
CVE-2021-21421
ApiKey secret could be revelated on network issue
Medium
CVE-2021-21391
Regular expression Denial of Service in multiple packages
High
CVE-2021-21414
Command injection vulnerability in @prisma/sdk in getPackedPackage function
Medium
CVE-2021-23348
Arbitrary Command Injection in portprocesses
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.