High
CVE-2021-39177
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2020-13929
Authentication bypass in Apache Zeppelin
Critical
CVE-2019-10095
Bash command injection in Apache Zeppelin
Medium
CVE-2021-27578
Cross-site Scripting in Apache Zeppelin
Critical
CVE-2021-39185
Default CORS config allows any origin with credentials
Critical
CVE-2021-34371
Deserialization of Untrusted Data in Neo4j
Medium
CVE-2021-39132
YAML deserialization can run untrusted code
High
CVE-2021-39133
Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server
High
CVE-2020-6950
Directory traversal in Eclipse Mojarra
Medium
CVE-2021-32827
Injection in MockServer
Medium
ghsa-hw7r-qrhp-5pff
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Medium
CVE-2021-33605
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
High
CVE-2021-39139
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-39140
XStream can cause a Denial of Service
High
CVE-2021-39141
XStream is vulnerable to an Arbitrary Code Execution attack
High
Exploited in attacks
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-39145
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39146
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39147
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39148
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39149
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39150
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39151
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39152
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.