Medium
CVE-2019-25028
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-36320
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Low
ghsa-3h5r-928v-mxhh
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
ghsa-jqj4-r483-4gvr
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
ghsa-76f4-fw33-6j2v
Potential sensitive data exposure in applications using Vaadin 15
Medium
ghsa-82mf-mmh7-hxp5
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
ghsa-c6c4-7x48-4cqp
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
High
CVE-2021-31405
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Medium
ghsa-9h6g-6mxg-vvp4
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
High
ghsa-j9wr-49vq-rm5g
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
Medium
CVE-2021-24274
Ultimate Maps by Supsystic <= 1.2.4 - Reflected Cross-Site scripting
Medium
CVE-2021-31693
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting <= 1.5.68 - Reflected Cross-Site Scripting
Medium
CVE-2021-24291
Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting
Medium
CVE-2021-46889
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting
Medium
CVE-2021-24276
Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting
Medium
CVE-2021-24275
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting
High
CVE-2021-29440
Grav's Twig processing allowing dangerous PHP functions by default
Medium
CVE-2021-29438
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
Medium
CVE-2024-0758
JavaScript execution via malicious molfiles (XSS)
Critical
CVE-2021-30246
RSA signature validation vulnerability on maleable encoded message in jsrsasign
High
CVE-2021-24324
404 SEO Redirection <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2021-24326
All 404 Redirect to Homepage < 1.21 - Reflected Cross-Site Scripting via tab Parameter
Medium
CVE-2021-24325
404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24327
SEO Redirection <= 6.4 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.