High
CVE-2020-35217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filters
Medium
CVE-2020-13954
Cross-site scripting in Apache CXF
Medium
CVE-2020-7744
Remote Code Execution and download tracking in Mintegral SDK
Critical
CVE-2021-29459
XSS Cross Site Scripting
High
ghsa-crh4-294p-vcfq
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
High
CVE-2020-36320
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
High
CVE-2021-31405
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Medium
CVE-2024-0758
JavaScript execution via malicious molfiles (XSS)
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-28164
Authorization Before Parsing and Canonicalization in jetty
Low
CVE-2024-23688
Discovery uses the same AES/GCM Nonce throughout the session
Medium
CVE-2021-28100
Netflix/Priam: Temporary Directory Information Disclosure
Medium
CVE-2021-28099
Insecure temporary file in Netflix OSS Hollow
Low
CVE-2020-8908
Information Disclosure in Guava
High
CVE-2021-21380
Rating Script Service expose XWiki to SQL injection
Low
CVE-2021-21379
It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro
Medium
CVE-2021-21349
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-21343
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
Medium
CVE-2021-21342
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-22132
Insufficiently Protected Credentials in Elasticsearch
Medium
CVE-2020-7014
Privilege Escalation Flaw in Elasticsearch
Low
CVE-2020-7020
Privilege Context Switching Error in Elasticsearch
Medium
CVE-2021-22134
Exposure of Sensitive Information to an Unauthorized Actor
Medium
CVE-2021-20262
Keycloak Missing authentication for critical function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.