Critical
CVE-2021-24148
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2020-28493
Regular Expression Denial of Service (ReDoS) in Jinja2
High
CVE-2021-21277
Angular Expressions - Remote Code Execution
High
CVE-2021-23329
Prototype pollution in nested-object-assign
High
CVE-2021-24151
WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injection
Medium
6da0a85d-0c6f-40ae-8a3d-85222f0e7cc5
Ivory Search – WordPress Search Plugin <= 4.5.10 - Reflected Cross-Site Scripting
Medium
CVE-2021-21254
CKEditor 5 Markdown plugin Regular expression Denial of Service
High
CVE-2021-21316
Processing untrusted theming resources might execute arbitrary code (ACE)
Critical
ghsa-hhw9-35p2-q2c5
Steam Socialite Provider v1 does not correctly validate openid server
High
CVE-2021-3142
XSS in Mautic
Critical
CVE-2018-1285
XML External Entity attack in log4net
Critical
CVE-2021-3190
OS Command Injection in async-git
High
CVE-2021-3223
Path traversal in Node-RED-Dashboard
Medium
CVE-2021-21283
XSS in Flarum Sticky extension
Medium
ghsa-32wx-4gxx-h48f
Users can edit the tags of any discussion
High
CVE-2021-23326
Command Injection in @graphql-tools/git-loader
Medium
CVE-2021-3137
Cross Site Scripting (XSS) in XWiki
High
CVE-2020-8570
Path Traversal in the Java Kubernetes Client
Critical
ghsa-7xcv-wvr7-4h6p
Malicious npm package: an0n-chat-lib
Critical
ghsa-qv2g-99x4-45x6
Malicious npm package: discord-fix
Critical
ghsa-w8fh-pvq2-x8c4
Malicious npm package: sonatype
High
CVE-2021-24145
Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution
High
CVE-2021-24149
Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection
Medium
CVE-2021-24147
Modern Events Calendar Lite <= 5.16.4 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.