Critical
CVE-2021-41862
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2021-41616
Deserialization of Untrusted Data in org.apache.ddlutils:ddlutils
Medium
CVE-2021-25959
Cross-site Scripting in OpenCRX
High
CVE-2020-7692
Improper Authorization in Google OAuth Client
Medium
CVE-2021-36749
Druid ingestion system Authenticated users can read data from other sources than intended
Medium
CVE-2021-38153
Observable Discrepancy in Apache Kafka
High
CVE-2021-41084
Response Splitting from unsanitized headers
High
CVE-2021-40690
Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario
High
CVE-2021-41079
Infinite loop in Tomcat due to parsing error
High
CVE-2020-21122
Server-Side Request Forgery in UReport
Critical
CVE-2020-21125
Remote code execution in UReport
Medium
CVE-2020-1744
Exposure of Sensitive Information in keycloak
Medium
CVE-2021-22147
Exposure of sensitive information in Elasticsearch
High
CVE-2021-39239
XML External Entity Reference in Apache Jena
Critical
CVE-2021-41303
Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass
Critical
CVE-2021-40146
Remote Code Execution in Any23
Critical
CVE-2021-38555
XML Injection in Any23
Critical
CVE-2021-37579
Security check skip in Apache Dubbo
Critical
CVE-2021-36161
Remote Code Execution in Apache Dubbo
High
CVE-2021-37137
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
High
CVE-2021-37136
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
High
CVE-2021-36162
Remote Code Execution in Apache Dubbo
Critical
CVE-2021-36163
Hessian protocol configuration vulnerability in Apache Dubbo
High
CVE-2021-40143
HTTP header injection in Sonatype Nexus Repository
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.