Medium
CVE-2021-32643
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filters
Critical
CVE-2021-27582
Autobinding vulnerability in MITREid Connect
High
CVE-2021-22696
Authorization service vulnerable to DDos attacks in Apache CFX
High
CVE-2021-26715
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
Medium
CVE-2021-26544
Apache Livy Cross-site scripting (XSS) in session names
Medium
CVE-2021-21430
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
Critical
CVE-2021-21428
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
Medium
CVE-2021-26074
Broken Authentication in Atlassian Connect Spring Boot
High
CVE-2021-27905
Server-Side Request Forgery in Apache Solr
Critical
CVE-2021-29943
Incorrect Authorization in Apache Solr
Medium
CVE-2021-23339
HTTP Request Smuggling in akka-http-core
High
CVE-2020-9298
Server-Side Request Forgery in Spinnaker Orca
Critical
CVE-2020-13921
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
High
CVE-2021-31411
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Medium
ghsa-c57f-4vp2-jqhm
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
High
CVE-2021-31409
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
CVE-2020-5412
Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix
High
CVE-2021-29441
Authentication bypass for specific endpoint
Medium
CVE-2020-7744
Remote Code Execution and download tracking in Mintegral SDK
Critical
CVE-2021-29459
XSS Cross Site Scripting
Medium
ghsa-6hgr-2g6q-3rmc
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Medium
CVE-2021-31408
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Low
CVE-2018-25007
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.