Medium
CVE-2020-25633
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2024-23680
Improper Verification of Cryptographic Signature in aws-encryption-sdk-java
Medium
CVE-2021-32643
StaticFile.fromUrl can leak presence of a directory
Low
CVE-2021-3536
Cross-site Scripting in Wildfly
Medium
CVE-2021-29506
Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
High
CVE-2021-29505
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-32620
XWiki users registered with email verification can self re-activate their disabled accounts
High
CVE-2021-32621
Script injection without script or programming rights through Gadget titles
Critical
CVE-2021-27582
Autobinding vulnerability in MITREid Connect
High
CVE-2021-26715
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
High
CVE-2021-20222
Code injection in keycloak
Medium
CVE-2021-21430
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
Critical
CVE-2021-21428
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
High
CVE-2021-22112
Privilege escalation in spring security
High
CVE-2021-27905
Server-Side Request Forgery in Apache Solr
Critical
CVE-2021-23369
Remote code execution in handlebars when compiling templates
High
CVE-2021-31409
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
CVE-2020-5421
Improper Input Validation in Spring Framework
High
CVE-2018-11765
Improper Authentication in Apache Hadoop
Medium
CVE-2020-10687
HTTP Request Smuggling in Undertow
High
CVE-2020-10705
Allocation of Resources Without Limits or Throttling in Undertow
Medium
CVE-2021-21429
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
High
CVE-2021-29441
Authentication bypass for specific endpoint
Medium
CVE-2021-28168
Local information disclosure via system temporary directory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.