Medium
CVE-2020-13956
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filters
Medium
CVE-2021-26074
Broken Authentication in Atlassian Connect Spring Boot
High
CVE-2021-29262
Improper permission handling in Apache Solr
High
CVE-2020-7712
trentm/json vulnerable to command injection
Low
CVE-2021-28163
Directory exposure in jetty
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-28164
Authorization Before Parsing and Canonicalization in jetty
High
CVE-2021-21341
XStream can cause a Denial of Service.
Low
CVE-2021-21331
Local Information Disclosure Vulnerability
Medium
CVE-2021-21290
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
High
CVE-2021-21294
Unbounded connection acceptance in http4s-blaze-server
Medium
CVE-2020-26258
Server-Side Forgery Request can be activated unmarshalling with XStream
Medium
CVE-2020-26259
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
High
CVE-2020-27216
Local Temp Directory Hijacking Vulnerability
High
CVE-2020-15087
Privilege escalation in Presto
High
CVE-2018-15756
Denial of Service in Spring Framework
Critical
CVE-2019-17570
Insecure Deserialization in Apache XML-RPC
Medium
CVE-2020-7647
path traversal in Jooby
High
CVE-2020-11002
Remote Code Execution (RCE) vulnerability in dropwizard-validation
High
CVE-2020-5245
Remote Code Execution (RCE) vulnerability in dropwizard-validation
Low
CVE-2020-5229
Password Hashing: Do not use MD5
Medium
CVE-2019-10770
Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)
Medium
CVE-2020-5397
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux
High
CVE-2019-17513
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.