Vulnerability DB

Detailed information and remediation guidance for known vulnerabilities.
Find out if you have vulnerabilities that put you at risk Test your code
Show:
Report a new vulnerability
Vulnerability Affects Type Published
  • H
Arbitrary Code Execution 		centreon/centreon >=19.0.0, <19.4.5,>=18.10.0, <18.10.8,<2.8.30 Composer 29 Jul, 2021
  • H
Out-of-bounds Write 		microsoft.chakracore [,1.11.17) NuGet 29 Jul, 2021
  • H
Out-of-bounds Write 		microsoft.chakracore [,1.11.17) NuGet 29 Jul, 2021
  • M
Information Exposure 		saleor [,2.10.1) pip 29 Jul, 2021
  • M
Information Disclosure 		github.com/hashicorp/consul >=1.4.1 <1.6.3 Go 29 Jul, 2021
  • M
Remote Code Execution (RCE) 		org.apache.juddi:uddi-tck-runner [,3.3.10) Maven 29 Jul, 2021
  • M
Remote Code Execution (RCE) 		org.apache.juddi:uddi-tck-base [,3.3.10) Maven 29 Jul, 2021
  • M
Remote Code Execution (RCE) 		org.apache.juddi:uddi-tck [,3.3.10) Maven 29 Jul, 2021
  • M
Remote Code Execution (RCE) 		org.apache.juddi:juddi-tomcat [,3.3.10) Maven 29 Jul, 2021
  • M
Remote Code Execution (RCE) 		org.apache.juddi:juddi-core [,3.3.10) Maven 29 Jul, 2021
  • M
Remote Code Execution (RCE) 		org.apache.juddi:juddi-client [,3.3.10) Maven 29 Jul, 2021
  • M
XML External Entity (XXE) Injection 		glances [,3.2.1) pip 29 Jul, 2021
  • C
Malicious Package 		acookie * npm 29 Jul, 2021
  • C
Malicious Package 		vscode-npm-script * npm 29 Jul, 2021
  • C
Malicious Package 		firebase-extensions * npm 29 Jul, 2021
  • M
Improper Input Validation 		xmldom * npm 28 Jul, 2021
  • M
Improper Input Validation 		org.webjars.npm:xmldom [0,] Maven 28 Jul, 2021
  • H
Directory Traversal 		elfinder.aspnet [,1.1.1) NuGet 28 Jul, 2021
  • M
Cross-site Scripting (XSS) 		curly-bracket-parser * npm 28 Jul, 2021
  • M
Prototype Pollution 		deepmergefn * npm 28 Jul, 2021
  • M
Cross-site Scripting (XSS) 		lavalite/cms >=0.0.0 Composer 27 Jul, 2021
  • L
Cross-site Scripting (XSS) 		evolutioncms/evolution >=0.0.0 Composer 27 Jul, 2021
  • H
SQL Injection 		woocommerce/woocommerce-blocks >=5.5.0, <5.5.1,>=5.4.0, <5.4.1,>=5.3.0, <5.3.2,>=5.2.0, <5.2.1,>=5.1.0, <5.1.1,>=5.0.0, <5.0.1,>=4.9.0, <4.9.2,>=4.8.0, <4.8.1,>=4.7.0, <4.7.1,>=4.6.0, <4.6.1,>=4.5.0, <4.5.3,>=4.4.0, <4.4.3,>=4.3.0, <4.3.1,>=4.2.0, <4.2.1,>=4.1.0, <4.1.1,>=4.0.0, <4.0.1,>=3.9.0, <3.9.1,>=3.8.0, <3.8.1,>=3.7.0, <3.7.2,>=3.6.0, <3.6.1,>=3.5.0, <3.5.1,>=3.4.0, <3.4.1,>=3.3.0, <3.3.1,>=3.2.0, <3.2.1,>=3.1.0, <3.1.1,>=3.0.0, <3.0.1,>=2.9.0, <2.9.1,>=2.8.0, <2.8.1,>=2.7.0, <2.7.2,>=2.6.0, <2.6.2,<2.5.16 Composer 27 Jul, 2021
  • M
SQL Injection 		woocommerce/woocommerce >=5.5.0, <5.5.2,>=5.4.0, <5.4.2,>=5.3.0, <5.3.1,>=5.2.0, <5.2.3,>=5.1.0, <5.1.1,>=5.0.0, <5.0.1,>=4.9.0, <4.9.3,>=4.8.0, <4.8.1,>=4.7.0, <4.7.2,>=4.6.0, <4.6.3,>=4.5.0, <4.5.3,>=4.4.0, <4.4.2,>=4.3.0, <4.3.4,>=4.2.0, <4.2.3,>=4.1.0, <4.1.2,>=4.0.0, <4.0.2,>=3.9.0, <3.9.4,>=3.8.0, <3.8.2,>=3.7.0, <3.7.2,>=3.6.0, <3.6.6,>=3.5.0, <3.5.9,>=3.4.0, <3.4.8,<3.3.6 Composer 27 Jul, 2021
  • M
Denial of Service (DoS) 		gopkg.in/yaml.v2 <2.2.3 Go 27 Jul, 2021
  • H
Insecure Defaults 		github.com/argoproj/argo-cd/v2/util/settings * Go 27 Jul, 2021
  • H
Insecure Defaults 		github.com/argoproj/argo-cd/util/settings * Go 27 Jul, 2021
  • H
Brute Force 		grumpydictator/firefly-iii <5.5.13 Composer 26 Jul, 2021
  • M
Open Redirect 		url-parse <1.5.2 npm 26 Jul, 2021
  • M
Open Redirect 		org.webjars.npm:url-parse [,1.5.2) Maven 26 Jul, 2021