Medium
CVE-2021-32731
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2021-22135
API information disclosure flaw in Elasticsearch
Medium
CVE-2021-29480
Ratpack's default client side session signing key is highly predictable
Critical
CVE-2021-29485
Remote Code Execution Vulnerability in Session Storage
Medium
CVE-2021-31412
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
High
CVE-2020-12642
XXE vulnerability in Launch import
High
CVE-2021-29620
XXE vulnerability on Launch import with externally-defined DTD file
Low
CVE-2021-34428
SessionListener can prevent a session from being invalidated breaking logout
High
CVE-2021-32623
Billion laughs attack (XML bomb)
Low
CVE-2021-23331
Insecure temporary file used in com.squareup:connect
High
CVE-2021-26919
Arbitrary code execution in Apache Druid
Medium
CVE-2021-20220
HTTP request smuggling in Undertow
Critical
CVE-2021-27850
Remote code execution in Apache Tapestry
Critical
CVE-2021-26291
Origin Validation Error in Apache Maven
Medium
CVE-2021-21620
Cross-Site Request Forgery in the Jenkins Claim plugin
Medium
CVE-2021-21651
Missing Authorization in Jenkins S3 publisher Plugin
Medium
CVE-2021-21650
Missing Authorization in Jenkins S3 publisher Plugin
High
CVE-2021-21652
CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials
Critical
CVE-2020-1959
Expression Language Injection in Apache Syncope
High
CVE-2020-1961
Injection in Apache Syncope
Medium
CVE-2021-28169
Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability
Critical
CVE-2021-20195
keycloak Self Stored Cross-site Scripting vulnerability
Medium
CVE-2020-25724
Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy
Medium
CVE-2020-1719
Privilege Context Switching Error in wildlfy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.