Medium
CVE-2021-2471
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2021-21683
Path traversal vulnerability on Windows in Jenkins
Medium
CVE-2021-21682
Improper handling of equivalent directory names on Windows in Jenkins
Medium
CVE-2021-21681
Password stored in plain text by Jenkins Nomad Plugin
High
CVE-2021-33338
Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
Medium
CVE-2021-33320
Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate
High
CVE-2021-33321
Liferay Portal and Liferay DXP insecure default configuration
Medium
CVE-2021-33325
Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
Medium
CVE-2021-33333
Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions
Medium
CVE-2021-33334
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
High
CVE-2021-34802
Improper Privilege Management in Neo4j Graph Database
Medium
CVE-2021-22145
Generation of Error Message Containing Sensitive Information in Elasticsearch
Medium
CVE-2021-21670
Improper permission checks allow canceling queue items and aborting builds in Jenkins
Medium
CVE-2021-21675
CSRF vulnerabilities in Jenkins requests-plugin Plugin
High
CVE-2021-21671
Session fixation vulnerability in Jenkins
Medium
CVE-2021-21676
Missing permission check in Jenkins requests-plugin Plugin allows sending emails
Medium
CVE-2021-21663
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
High
CVE-2021-21665
CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
Medium
CVE-2021-21664
Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials
Medium
CVE-2021-29052
Liferay Portal and Liferay DXP Fails to Check Permissions
High
CVE-2021-29047
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Medium
CVE-2021-22137
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Medium
CVE-2021-21640
View name validation bypass in Jenkins
Medium
CVE-2021-21639
Lack of type validation in agent related REST API in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.