Medium
CVE-2021-22051
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2020-14389
Improper privilege management in Keycloak
High
ghsa-9wx7-jrvc-28mm
Signature verification vulnerability in Stark Bank ecdsa libraries
Medium
CVE-2021-33611
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
Medium
CVE-2021-41973
Infinite loop in Apache MINA
High
CVE-2021-27644
SQL injection in Apache DolphinScheduler
High
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Critical
CVE-2021-40865
Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm
Critical
CVE-2021-38294
Command injection leading to Remote Code Execution in Apache Storm
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Medium
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Medium
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
High
CVE-2019-10170
Privilege Defined With Unsafe Actions in Keycloak
Critical
CVE-2021-42575
Policies not properly enforced in OWASP Java HTML Sanitizer
High
CVE-2021-42340
Missing Release of Resource after Effective Lifetime in Apache Tomcat
Medium
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
High
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
ghsa-j23j-q57m-63v3
Denial of service in DataCommunicator class in Vaadin 8
Medium
CVE-2021-33609
Denial of service in DataCommunicator class in Vaadin 8
Medium
CVE-2021-25738
Code injection in Kubernetes Java Client
Medium
CVE-2021-3312
XML External Entity Reference in org.opencms:opencms-core
Medium
CVE-2020-29204
Cross-site Scripting in XXL-JOB
Medium
CVE-2021-28170
Improper Input Validation in Jakarta Expression Language
Critical
CVE-2021-41862
Expression injection in AviatorScript
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.