Medium
CVE-2020-15522
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
High
CVE-2021-30129
Buffer Overflow in Apache Mina SSHD
High
CVE-2020-27178
Improper Authentication in Apereo CAS
High
CVE-2021-32769
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core
Medium
CVE-2021-34429
Encoded URIs can access WEB-INF directory in Eclipse Jetty
Medium
CVE-2021-21672
XXE vulnerability in Jenkins Selenium HTML report Plugin
High
CVE-2021-29479
Cached redirect poisoning via X-Forwarded-Host header
Critical
CVE-2021-29485
Remote Code Execution Vulnerability in Session Storage
Low
CVE-2021-33604
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
Medium
CVE-2021-31412
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Low
ghsa-8vfw-v2jv-9hwc
Reflected cross-site scripting in development mode handler in Vaadin
High
CVE-2020-12642
XXE vulnerability in Launch import
High
CVE-2021-29620
XXE vulnerability on Launch import with externally-defined DTD file
Low
CVE-2021-34428
SessionListener can prevent a session from being invalidated breaking logout
High
CVE-2021-26919
Arbitrary code execution in Apache Druid
High
CVE-2021-27576
Uncontrolled Resource Consumption in Apache OpenMeetings server
High
CVE-2021-25646
Code injection in Apache Druid
High
CVE-2021-26117
Improper Authentication in Apache ActiveMQ and Apache Artemis
Medium
CVE-2021-21654
Missing Authorization in Jenkins P4 plugin
High
CVE-2021-26077
Improper Authentication in Atlassian Connect Spring Boot
Medium
CVE-2021-32053
Uncontrolled Resource Consumption in JPA Server in HAPI FHIR
Critical
CVE-2020-1959
Expression Language Injection in Apache Syncope
High
CVE-2020-1961
Injection in Apache Syncope
Critical
CVE-2017-5929
QOS.ch Logback vulnerable to Deserialization of Untrusted Data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.