Critical
Exploited in attacks
CVE-2017-1000486
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Critical
CVE-2021-22160
Improper Verification of Cryptographic Signature in Apache Pulsar in TensorFlow
Medium
CVE-2024-23680
Improper Verification of Cryptographic Signature in aws-encryption-sdk-java
Medium
CVE-2021-32643
StaticFile.fromUrl can leak presence of a directory
Medium
CVE-2021-25933
Cross-site Scripting in OpenNMS Horizon
Medium
CVE-2021-25929
Cross-site Scripting in OpenNMS Horizon
High
CVE-2021-25931
Cross-Site Request Forgery in OpenNMS Horizon
Medium
CVE-2021-25930
Cross-Site Request Forgery in OpenNMS Horizon
Low
CVE-2021-3536
Cross-site Scripting in Wildfly
High
CVE-2020-11972
Deserialization of Untrusted Data in Apache Camel RabbitMQ
Medium
CVE-2020-1960
Command injection in Apache Flink
High
CVE-2020-11971
Improper Input Validation in Apache Camel
Medium
CVE-2021-29506
Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
High
CVE-2021-29505
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-32620
XWiki users registered with email verification can self re-activate their disabled accounts
High
CVE-2021-32621
Script injection without script or programming rights through Gadget titles
High
CVE-2021-23900
Uncaught Exception leading to Denial of Service in json-sanitizer
Critical
CVE-2021-27582
Autobinding vulnerability in MITREid Connect
High
CVE-2021-21028
Reflected Cross-site Scripting in ACS Commons
High
CVE-2021-22696
Authorization service vulnerable to DDos attacks in Apache CFX
High
CVE-2021-26715
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
Medium
CVE-2021-26544
Apache Livy Cross-site scripting (XSS) in session names
Medium
CVE-2021-27906
Uncontrolled Memory Allocation in Apache PDFBox
Medium
CVE-2021-24122
Information Disclosure in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.