Critical
CVE-2020-1957
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Critical
CVE-2020-11989
Improper Authentication in Apache Shiro
Critical
CVE-2016-11023
SQL Injection in odata4j
Critical
CVE-2016-11024
SQL Injection in odata4j
High
CVE-2020-7712
trentm/json vulnerable to command injection
Critical
CVE-2021-23369
Remote code execution in handlebars when compiling templates
High
CVE-2021-31411
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Medium
ghsa-c57f-4vp2-jqhm
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
High
CVE-2021-31409
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
CVE-2020-5421
Improper Input Validation in Spring Framework
Medium
CVE-2020-5412
Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix
High
CVE-2018-11765
Improper Authentication in Apache Hadoop
Medium
CVE-2020-10687
HTTP Request Smuggling in Undertow
High
CVE-2020-10705
Allocation of Resources Without Limits or Throttling in Undertow
Medium
CVE-2020-10719
HTTP Request Smuggling in Undertow
High
CVE-2020-28052
Logic error in Legion of the Bouncy Castle BC Java
Medium
CVE-2021-21429
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
High
CVE-2021-29441
Authentication bypass for specific endpoint
Medium
CVE-2021-29425
Path Traversal and Improper Input Validation in Apache Commons IO
Medium
CVE-2021-28168
Local information disclosure via system temporary directory
Medium
CVE-2020-26939
Observable Differences in Behavior to Error Inputs in Bouncy Castle
High
CVE-2020-35217
Cross-Site Request Forgery in Vert.x-Web framework
Medium
CVE-2020-9447
Cross-site Scripting in GwtUpload
Medium
CVE-2020-13954
Cross-site scripting in Apache CXF
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.