High
CVE-2021-21413
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-21412
[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values
Low
CVE-2024-23688
Discovery uses the same AES/GCM Nonce throughout the session
Medium
CVE-2021-27908
Mautic vulnerable to secret data exfiltration via symfony parameters
Medium
CVE-2021-28658
Directory Traversal in Django
High
7193b373-a0c9-4cd7-8a53-4f35ceff8f23
Alkubot – Gamify discounts, sell more and give less at the right time < 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2021-24244
WPBakery Page Builder Clipboard < 4.5.8 - Arbitrary License Options Update
Medium
CVE-2021-24242
Tutor LMS <= 1.8.7 - Authenticated Local File Inclusion
High
1664fef3-6416-4678-9ee7-bed2184d7490
Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections
Medium
CVE-2021-24239
Pie Register – User Registration Forms <= 3.7.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24243
WPBakery Page Builder Clipboard <= 4.5.5 - Stored Cross-Site Scripting
Critical
CVE-2021-24240
Business Hours Pro <= 5.5.0 - Arbitrary File Upload
Low
CVE-2021-21416
Potential sensitive information disclosed in error reports
High
CVE-2021-29421
Improper Restriction of XML External Entity Reference in pikepdf
Unrated
CVE-2021-3447
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller
Medium
CVE-2021-24658
Erident Custom Login and Dashboard <= 3.5.8 - Authenticated Stored Cross-Site Scripting
Medium
dede9cfc-61f1-4df1-bd40-e5ae73199575
OneLogin SAML SSO <= 3.1.2 - Open Redirection
Medium
CVE-2021-24237
Realteo <= 1.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-28100
Netflix/Priam: Temporary Directory Information Disclosure
Medium
CVE-2021-21409
Possible request smuggling in HTTP/2 due missing validation of content-length
Medium
CVE-2021-24234
Ivory Search <= 4.6 - Reflected Cross Site Scripting
High
992b362b-b01f-4c91-83ac-dd612b93ee03
Woocommerce Customers Manager <= 26.5 - Cross-Site Request Forgery to Account Creation
Critical
CVE-2021-4360
Controlled Admin Access < 1.5.6 - Privilege Escalation
Medium
CVE-2021-24233
Cooked Pro <= 1.7.5.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.