Medium
CVE-2021-24281
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24282
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions
Critical
CVE-2021-24284
Kaswara Modern VC Addons <= 3.0.1 - Arbitrary File Upload
High
CVE-2021-24280
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection
High
CVE-2021-24278
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation
Medium
CVE-2021-24279
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation
High
CVE-2021-29434
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
High
CVE-2021-29452
Any logged in user could edit any other logged in user.
Medium
CVE-2021-48020
VVE-2021-0001: Memory corruption using function calls within arrays
Low
CVE-2021-48019
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Medium
CVE-2021-29446
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime
Medium
CVE-2021-29445
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
Medium
CVE-2021-29444
Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime
Medium
CVE-2021-29443
Padding Oracle Attack due to Observable Timing Discrepancy in jose
Critical
CVE-2021-29451
Missing validation of JWT signature in `ManyDesigns/Portofino`
High
ghsa-crh4-294p-vcfq
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Low
CVE-2018-25007
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
CVE-2020-36319
Potential sensitive data exposure in applications using Vaadin 15
Medium
CVE-2020-36321
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
CVE-2021-31404
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Medium
CVE-2021-31403
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
High
CVE-2021-31407
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
Medium
CVE-2021-31406
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.