Medium
CVE-2021-39194
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2021-39177
User impersonation due to incorrect handling of the login JWT
Critical
CVE-2021-39185
Default CORS config allows any origin with credentials
Critical
CVE-2021-34371
Deserialization of Untrusted Data in Neo4j
Medium
CVE-2021-39132
YAML deserialization can run untrusted code
High
CVE-2021-39133
Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server
Medium
CVE-2021-32827
Injection in MockServer
High
CVE-2021-39139
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-39140
XStream can cause a Denial of Service
High
Exploited in attacks
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-39149
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39150
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39152
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-33192
Cross-site scripting in Apache Jena Fuseki
High
CVE-2021-30639
Improper Handling of Exceptional Conditions in Apache Tomcat
High
CVE-2021-36090
Improper Handling of Length Parameter Inconsistency in Compress
High
CVE-2021-35517
Improper Handling of Length Parameter Inconsistency in Compress
High
CVE-2021-35516
Improper Handling of Length Parameter Inconsistency in Compress
High
CVE-2021-35515
Excessive Iteration in Compress
Medium
CVE-2020-19676
Incorrect Access Control in Nacos
High
CVE-2021-32769
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core
Medium
CVE-2021-34429
Encoded URIs can access WEB-INF directory in Eclipse Jetty
Low
CVE-2021-32729
A user without PR can reset user authentication failures information
Medium
CVE-2021-32730
No CSRF protection on the password change form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.