Alta
CVE-2021-40831
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Crítica
CVE-2021-39231
Exposure of sensitive information in Apache Ozone
Crítica
CVE-2021-39233
Incorrect Authorization in Apache Ozone
Media
CVE-2021-41532
Apache Ozone exposes OM, SCM and Datanode metadata
Media
CVE-2021-39235
Incorrect permissions in Apache Ozone
Crítica
CVE-2021-36372
Improper Privilege Management in Apache Ozone
Alta
CVE-2021-39232
Incorrect Authorization in Apache Ozone
Media
CVE-2021-39234
Incorrect Authorization in Apache Ozone
Crítica
CVE-2021-43570
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Alta
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Media
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Alta
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Media
CVE-2020-29204
Cross-site Scripting in XXL-JOB
Crítica
CVE-2021-41616
Deserialization of Untrusted Data in org.apache.ddlutils:ddlutils
Alta
CVE-2020-7692
Improper Authorization in Google OAuth Client
Media
CVE-2021-36749
Druid ingestion system Authenticated users can read data from other sources than intended
Alta
CVE-2021-41084
Response Splitting from unsanitized headers
Alta
CVE-2020-21122
Server-Side Request Forgery in UReport
Media
CVE-2020-1744
Exposure of Sensitive Information in keycloak
Media
CVE-2021-22147
Exposure of sensitive information in Elasticsearch
Crítica
CVE-2021-37579
Security check skip in Apache Dubbo
Alta
CVE-2021-37137
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
Alta
CVE-2021-37136
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
Crítica
CVE-2021-36163
Hessian protocol configuration vulnerability in Apache Dubbo
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.