High
CVE-2020-26945
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Medium
CVE-2020-13955
Missing Authentication for Critical Function in Apache Calcite
Critical
CVE-2020-17510
Authentication bypass in Apache Shiro
Critical
CVE-2021-29459
XSS Cross Site Scripting
Medium
ghsa-6hgr-2g6q-3rmc
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Medium
CVE-2021-31408
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Critical
CVE-2021-29451
Missing validation of JWT signature in `ManyDesigns/Portofino`
High
ghsa-crh4-294p-vcfq
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Low
CVE-2018-25007
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
CVE-2020-36319
Potential sensitive data exposure in applications using Vaadin 15
Medium
CVE-2020-36321
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
CVE-2021-31404
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Medium
CVE-2021-31403
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
High
CVE-2021-31407
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
Medium
CVE-2021-31406
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Medium
CVE-2019-25028
Stored cross-site scripting in Grid component in Vaadin 7 and 8
High
CVE-2020-36320
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Low
ghsa-3h5r-928v-mxhh
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
ghsa-jqj4-r483-4gvr
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
ghsa-76f4-fw33-6j2v
Potential sensitive data exposure in applications using Vaadin 15
Medium
ghsa-82mf-mmh7-hxp5
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
ghsa-c6c4-7x48-4cqp
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
High
CVE-2021-31405
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.