Medium
CVE-2021-21342
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2021-21341
XStream can cause a Denial of Service.
High
CVE-2021-25329
Potential remote code execution in Apache Tomcat
Medium
CVE-2021-22132
Insufficiently Protected Credentials in Elasticsearch
Medium
CVE-2020-7014
Privilege Escalation Flaw in Elasticsearch
Low
CVE-2020-7020
Privilege Context Switching Error in Elasticsearch
Medium
CVE-2021-22134
Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2020-13949
Uncontrolled Resource Consumption in Apache Thrift
Medium
CVE-2021-20262
Keycloak Missing authentication for critical function
Medium
CVE-2020-13959
Cross-site scripting (XSS) in Apache Velocity Tools
Medium
CVE-2021-21364
Generated Code Contains Local Information Disclosure Vulnerability
Low
CVE-2021-21363
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
Medium
CVE-2020-27223
DOS vulnerability for Quoted Quality CSV headers
Medium
CVE-2021-21295
Possible request smuggling in HTTP/2 due missing validation
High
CVE-2021-21361
Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin
Low
CVE-2021-21331
Local Information Disclosure Vulnerability
Medium
CVE-2020-13697
NanoHTTPD Cross-site Scripting vulnerability
High
CVE-2020-25649
XML External Entity (XXE) Injection in Jackson Databind
High
CVE-2021-21479
Remote Code Execution in SCIMono
Medium
CVE-2021-21290
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
Low
ghsa-w736-hf9p-qqh3
Key Caching behavior in the DynamoDB Encryption Client.
High
CVE-2020-11979
Code injection in Apache Ant
High
CVE-2021-21294
Unbounded connection acceptance in http4s-blaze-server
High
CVE-2021-21293
Unbounded connection acceptance leads to file handle exhaustion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.