Medium
CVE-2021-20262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2021-21364
Generated Code Contains Local Information Disclosure Vulnerability
Low
CVE-2021-21363
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
Medium
CVE-2020-27223
DOS vulnerability for Quoted Quality CSV headers
Medium
CVE-2021-21295
Possible request smuggling in HTTP/2 due missing validation
High
CVE-2021-21361
Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin
Low
CVE-2021-21331
Local Information Disclosure Vulnerability
High
CVE-2021-21479
Remote Code Execution in SCIMono
Medium
CVE-2021-21290
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
High
CVE-2020-11979
Code injection in Apache Ant
High
CVE-2021-21294
Unbounded connection acceptance in http4s-blaze-server
High
CVE-2021-21293
Unbounded connection acceptance leads to file handle exhaustion
High
CVE-2021-20190
Deserialization of untrusted data in jackson-databind
High
CVE-2020-26282
Server-Side Template Injection
Medium
CVE-2020-26258
Server-Side Forgery Request can be activated unmarshalling with XStream
Medium
CVE-2020-26259
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
Medium
CVE-2020-17521
Information Disclosure in Apache Groovy
High
CVE-2020-26217
XStream can be used for Remote Code Execution
High
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
High
CVE-2020-16164
Vulnerability in RPKI manifest validation
Critical
CVE-2017-15708
Remote Code Execution in Apache Synapse
High
CVE-2020-27216
Local Temp Directory Hijacking Vulnerability
Medium
CVE-2020-8929
Ciphertext Malleability Issue in Tink Java
Low
ghsa-8hxh-r6f7-jf45
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.