Media
CVE-2021-22051
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2020-14389
Improper privilege management in Keycloak
Alta
ghsa-9wx7-jrvc-28mm
Signature verification vulnerability in Stark Bank ecdsa libraries
Media
CVE-2021-33611
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
Media
CVE-2021-41973
Infinite loop in Apache MINA
Alta
CVE-2021-27644
SQL injection in Apache DolphinScheduler
Alta
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Crítica
CVE-2021-40865
Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm
Crítica
CVE-2021-38294
Command injection leading to Remote Code Execution in Apache Storm
Media
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Media
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Media
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
Alta
CVE-2019-10170
Privilege Defined With Unsafe Actions in Keycloak
Crítica
CVE-2021-42575
Policies not properly enforced in OWASP Java HTML Sanitizer
Alta
CVE-2021-42340
Missing Release of Resource after Effective Lifetime in Apache Tomcat
Media
ghsa-fr26-qjc8-mvjx
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Alta
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Media
ghsa-j23j-q57m-63v3
Denial of service in DataCommunicator class in Vaadin 8
Media
CVE-2021-33609
Denial of service in DataCommunicator class in Vaadin 8
Media
CVE-2021-25738
Code injection in Kubernetes Java Client
Media
CVE-2021-3312
XML External Entity Reference in org.opencms:opencms-core
Media
CVE-2020-29204
Cross-site Scripting in XXL-JOB
Media
CVE-2021-28170
Improper Input Validation in Jakarta Expression Language
Crítica
CVE-2021-41862
Expression injection in AviatorScript
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.