High
CVE-2021-46366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2021-46365
Improper Restriction of XML External Entity Reference in Magnolia CMS
High
CVE-2021-46364
Deserialization of Untrusted Data in Magnolia CMS
High
CVE-2021-46363
Arbitrary code execution in Magnolia CMS
Critical
CVE-2021-46361
Arbitrary code execution in Magnolia CMS
High
CVE-2020-11969
Missing Authentication for Critical Function in Apache TomEE
Critical
CVE-2020-9296
Expression Language Injection in Netflix Conductor
Medium
CVE-2020-9495
Injection in Apache Archiva
Critical
CVE-2020-9480
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
Medium
CVE-2019-14900
SQL Injection in Hibernate ORM
Medium
CVE-2020-11980
Server-Side Request Forgery in Karaf
Medium
CVE-2020-13973
Cross-site scripting in json-sanitizer
Critical
CVE-2018-21234
Deserialization of Untrusted Data in Jodd
High
CVE-2021-31684
Out of bounds read in json-smart
Medium
CVE-2021-43841
Cross-site Scripting by SVG upload in xwiki-platform
High
CVE-2021-32732
Cross-Site Request Forgery in xwiki-platform
High
CVE-2020-15813
Improper Certificate Validation in Graylog
Critical
CVE-2020-1948
Deserialization of Untrusted Data in Apache Dubbo
Medium
CVE-2020-1954
Apache CXF JMX Integration is vulnerable to a MITM attack
High
CVE-2020-24164
Gadget chain attack in Nippy
Medium
CVE-2019-12416
Injection in DeltaSpike
Medium
CVE-2020-13928
Cross-site scripting in Apache Atlas
High
CVE-2019-10091
Apache Geode SSL endpoint verification vulnerability
High
CVE-2020-10591
Exposure of Sensitive Information to an Unauthorized Actor in Concord
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.