Low
CVE-2020-36319
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filters
Medium
CVE-2020-36321
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
CVE-2021-31404
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Medium
CVE-2021-31403
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
High
CVE-2021-31407
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
Medium
CVE-2021-31406
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Medium
CVE-2019-25028
Stored cross-site scripting in Grid component in Vaadin 7 and 8
High
CVE-2020-36320
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Low
ghsa-3h5r-928v-mxhh
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
ghsa-jqj4-r483-4gvr
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
ghsa-76f4-fw33-6j2v
Potential sensitive data exposure in applications using Vaadin 15
Medium
ghsa-82mf-mmh7-hxp5
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
ghsa-c6c4-7x48-4cqp
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Medium
ghsa-9h6g-6mxg-vvp4
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
High
ghsa-j9wr-49vq-rm5g
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-21349
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-21342
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Low
CVE-2020-7020
Privilege Context Switching Error in Elasticsearch
Low
CVE-2021-21363
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
Medium
CVE-2020-27223
DOS vulnerability for Quoted Quality CSV headers
Medium
CVE-2020-13697
NanoHTTPD Cross-site Scripting vulnerability
High
CVE-2021-21479
Remote Code Execution in SCIMono
High
CVE-2021-21294
Unbounded connection acceptance in http4s-blaze-server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.