Low
CVE-2021-3536
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 310
Reset filters
High
CVE-2021-26715
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
Medium
CVE-2020-26939
Observable Differences in Behavior to Error Inputs in Bouncy Castle
High
CVE-2021-21341
XStream can cause a Denial of Service.
Medium
CVE-2020-13959
Cross-site scripting (XSS) in Apache Velocity Tools
High
CVE-2018-12023
Deserialization of Untrusted Data
Critical
CVE-2020-7611
Micronaut's HTTP client is vulnerable to HTTP Request Header Injection
Medium
CVE-2019-10219
The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
Critical
CVE-2017-5645
Deserialization of Untrusted Data in Log4j
Critical
CVE-2019-17531
jackson-databind polymorphic typing issue
Critical
CVE-2019-16943
jackson-databind polymorphic typing issue
Critical
CVE-2019-16942
Polymorphic Typing in FasterXML jackson-databind
Critical
CVE-2019-10071
Timing attack on HMAC signature comparison in Apache Tapestry
High
CVE-2018-12022
jackson-databind Deserialization of Untrusted Data vulnerability
High
CVE-2018-11793
Stack Overflow in Apache Mesos
Critical
CVE-2018-15531
JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
High
CVE-2018-1259
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
Critical
Exploited in attacks
CVE-2018-1273
Spring Data Commons remote code injection vulnerability
High
Exploited in attacks
CVE-2017-9805
REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering
High
CVE-2017-9793
The REST Plugin in Apache Struts is using an outdated XStream library
Medium
CVE-2017-15707
Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin
High
CVE-2018-1327
Apache Struts REST Plugin can potentially allow a DoS attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.