Medium
ghsa-9h6g-6mxg-vvp4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
ghsa-j9wr-49vq-rm5g
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
Medium
CVE-2024-0758
JavaScript execution via malicious molfiles (XSS)
Medium
CVE-2021-20289
Exposure of class information in RESTEasy
Low
CVE-2021-28163
Directory exposure in jetty
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2021-28164
Authorization Before Parsing and Canonicalization in jetty
Low
CVE-2024-23688
Discovery uses the same AES/GCM Nonce throughout the session
Medium
CVE-2021-28100
Netflix/Priam: Temporary Directory Information Disclosure
Medium
CVE-2021-21409
Possible request smuggling in HTTP/2 due missing validation of content-length
Medium
CVE-2021-28099
Insecure temporary file in Netflix OSS Hollow
Low
CVE-2020-8908
Information Disclosure in Guava
High
CVE-2021-21380
Rating Script Service expose XWiki to SQL injection
Low
CVE-2021-21379
It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro
Medium
CVE-2021-21351
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21350
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21349
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-21348
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
Medium
CVE-2021-21347
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21346
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21345
XStream is vulnerable to a Remote Command Execution attack
Medium
CVE-2021-21344
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21343
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
Medium
CVE-2021-21342
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.