Medium
CVE-2021-33336
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2021-35463
Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module
Medium
CVE-2021-33337
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module
Medium
CVE-2021-33326
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module
Medium
CVE-2021-33320
Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate
High
CVE-2021-33321
Liferay Portal and Liferay DXP insecure default configuration
Medium
CVE-2021-33327
Liferay Portal and Liferay DXP does not properly check user permission
High
CVE-2021-33323
Liferay Portal and Liferay DXP autosaves form data for other users to see
Medium
CVE-2021-33324
Liferay Portal and Liferay DXP Don't Check Permissions of Pages
Medium
CVE-2021-33328
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page
Medium
CVE-2021-33325
Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
Medium
CVE-2021-33333
Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions
Medium
CVE-2021-33332
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-33331
Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs
Medium
CVE-2021-33334
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
High
CVE-2021-34802
Improper Privilege Management in Neo4j Graph Database
Medium
CVE-2021-22145
Generation of Error Message Containing Sensitive Information in Elasticsearch
Medium
CVE-2021-21674
Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests
Medium
CVE-2021-21670
Improper permission checks allow canceling queue items and aborting builds in Jenkins
Medium
CVE-2021-21675
CSRF vulnerabilities in Jenkins requests-plugin Plugin
High
CVE-2021-21671
Session fixation vulnerability in Jenkins
Medium
CVE-2021-21676
Missing permission check in Jenkins requests-plugin Plugin allows sending emails
Medium
CVE-2021-21673
Open redirect vulnerability in Jenkins CAS Plugin
Critical
CVE-2021-31649
JFinal Java Deserialization Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.