Critical
CVE-2021-21695
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2021-42697
Uncontrolled Recursion in Akka HTTP
Medium
CVE-2021-22096
Improper Output Neutralization for Logs in Spring Framework
Medium
CVE-2021-22097
Deserialization of Untrusted Data in Spring AMQP
Medium
CVE-2021-22047
Exposure of Resource to Wrong Sphere in Spring Data REST
High
CVE-2021-22044
Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign
Medium
CVE-2021-2471
Incorrect Authorization in MySQL Connector Java
High
CVE-2021-3869
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
Critical
CVE-2021-3878
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
Medium
CVE-2021-21684
Stored XSS vulnerability in Jenkins Git Plugin
Medium
CVE-2021-21683
Path traversal vulnerability on Windows in Jenkins
Medium
CVE-2021-21682
Improper handling of equivalent directory names on Windows in Jenkins
Medium
CVE-2021-40824
Logic error in Matrix SDK for Android
High
CVE-2021-21678
Jenkins SAML Plugin allows bypassing CSRF protection for any URL
High
CVE-2021-21677
RCE vulnerability in Jenkins Code Coverage API Plugin
High
CVE-2021-21679
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
Medium
CVE-2021-21681
Password stored in plain text by Jenkins Nomad Plugin
High
CVE-2021-21680
XXE vulnerability in Jenkins Nested View Plugin
High
CVE-2021-28490
Cross-Site Request Forgery in OWASP CSRFGuard
Critical
CVE-2020-28088
Jeecg-Boot CMS arbitrary file upload vulnerability
Medium
CVE-2021-3642
Observable Discrepancy in Wildfly Elytron
High
CVE-2021-33335
Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers
High
CVE-2021-33338
Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
Medium
CVE-2021-33339
Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.