Critical
CVE-2021-39231
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filters
Critical
CVE-2021-39233
Incorrect Authorization in Apache Ozone
Medium
CVE-2021-41532
Apache Ozone exposes OM, SCM and Datanode metadata
Medium
CVE-2021-39235
Incorrect permissions in Apache Ozone
Critical
CVE-2021-36372
Improper Privilege Management in Apache Ozone
High
CVE-2021-39232
Incorrect Authorization in Apache Ozone
Medium
CVE-2021-39234
Incorrect Authorization in Apache Ozone
Critical
CVE-2021-43570
Improper Verification of Cryptographic Signature in starkbank-ecdsa
High
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Medium
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
High
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
CVE-2020-29204
Cross-site Scripting in XXL-JOB
Critical
CVE-2021-41616
Deserialization of Untrusted Data in org.apache.ddlutils:ddlutils
High
CVE-2020-7692
Improper Authorization in Google OAuth Client
Medium
CVE-2021-36749
Druid ingestion system Authenticated users can read data from other sources than intended
High
CVE-2021-41084
Response Splitting from unsanitized headers
High
CVE-2020-21122
Server-Side Request Forgery in UReport
Medium
CVE-2020-1744
Exposure of Sensitive Information in keycloak
Medium
CVE-2021-22147
Exposure of sensitive information in Elasticsearch
Critical
CVE-2021-37579
Security check skip in Apache Dubbo
High
CVE-2021-37137
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
High
CVE-2021-37136
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
Critical
CVE-2021-36163
Hessian protocol configuration vulnerability in Apache Dubbo
Medium
CVE-2021-39194
Improper Handling of Missing Values in kaml
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.