Critical
CVE-2021-32711
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
ghsa-jvg4-9rc2-wvcr
Generation of fake documents via public GET-call
High
CVE-2021-21479
Remote Code Execution in SCIMono
Medium
CVE-2021-24317
Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Cross-Site Scripting
High
CVE-2021-24160
Responsive Menu 4.0 - 4.0.3 - Authenticated Arbitrary File Upload
High
CVE-2021-24161
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2021-24235
Goto - Tour & Travel WordPress Theme < 2.0 - Reflected Cross-Site Scripting
High
CVE-2021-24162
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Setting Modification
High
03fd0c97-7b50-4930-99ca-c9b37d7e4ade
Map Block for Google Maps <= 1.31 - Unprotected AJAX Action
Critical
CVE-2020-14343
Improper Input Validation in PyYAML
Medium
CVE-2021-21306
Regular Expression Denial of Service (REDoS) in Marked
Medium
CVE-2021-21290
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
High
CVE-2021-21240
Regular Expression Denial of Service (REDoS) in httplib2
High
CVE-2021-21304
Prototype Pollution in Dynamoose
Low
ghsa-4ph2-8337-hm62
Key Caching behavior in the DynamoDB Encryption Client.
Low
ghsa-w736-hf9p-qqh3
Key Caching behavior in the DynamoDB Encryption Client.
High
f56a632d-4c5f-4d89-9cd9-8fc3697ff3ca
Membership by Supsystic <= 1.5.0 - Authenticated (Admin+) Time-Based Blind SQL Injection
High
e7ecd712-a7b3-40e2-b982-be8b58e9b8c3
Welcart e-Commerce <= 2.1.0 - SQL Injection
High
9a9c8c4f-ce07-4fe5-a573-ece675d51441
Pricing Table by Supsystic <= 1.8.8 - Boolean-Based Blind SQL Injections
High
931983c3-d704-4c95-8078-7db4d79e1e1c
Newsletter by Supsystic <= 1.5.6 - Authenticated (Admin+) Time-Based Blind SQL Injection
High
7934c73c-17cf-4cec-a8da-654cee453b8f
Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion
High
758e23e4-72e6-4dc1-94f9-d02b75bb9857
Ultimate Maps by Supsystic <= 1.1.16 - Authenticated SQL Injection
Medium
592b1df5-74d5-4414-aacb-7497f0f307f1
Digital Publications by Supsystic <= 1.6.12 - Stored Cross-Site Scripting
High
3d6629e9-ab43-4eca-9340-5691421ab19d
Contact Form by Supsystic <= 1.7.10 - SQL Injections
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.