High
CVE-2021-4133
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Critical
ghsa-3qpm-h9ch-px3c
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
Medium
CVE-2021-44145
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi
Medium
CVE-2021-44832
Improper Input Validation and Injection in Apache Log4j2
High
CVE-2021-45105
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
High
ghsa-3w6p-8f82-gw8r
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
Medium
CVE-2020-35215
Malicious Atomix node queries expose sensitive information
High
CVE-2020-35209
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
High
CVE-2020-35214
An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.
Medium
CVE-2020-35210
A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.
Medium
CVE-2020-35216
An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.
High
CVE-2020-35213
An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.
High
CVE-2020-35211
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.
Medium
CVE-2021-42550
Deserialization of Untrusted Data in logback
Critical
ghsa-j7c3-96rf-jrrp
Critical vulnerability in log4j may affect generated PEAR projects
Medium
ghsa-hwvm-vfw8-93mw
Vulnerable dependency in XTDB connector
Critical
CVE-2021-23264
Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search
High
CVE-2021-23463
Improper Restriction of XML External Entity Reference in com.h2database:h2.
High
CVE-2021-44549
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail
Critical
CVE-2021-43113
Command injection in itext7-core
Critical
ghsa-94g7-hpv8-h9qm
Remote code injection in Log4j
Critical
CVE-2021-43821
Files Accessible to External Parties in Opencast
High
CVE-2018-16153
Opencast publishes global system account credentials
High
CVE-2021-43807
HTTP Method Spoofing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.