Critical
CVE-2021-21692
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Critical
CVE-2021-21693
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21694
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21688
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21691
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21687
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
High
CVE-2021-21696
Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin
Medium
CVE-2021-21698
Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files
Critical
CVE-2021-21697
Agent-to-controller access control allows reading/writing most content of build directories in Jenkins
Critical
CVE-2021-21695
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
High
CVE-2021-42057
Obsidian Dataview vulnerable to code injection due to unsafe eval
High
CVE-2021-42697
Uncontrolled Recursion in Akka HTTP
Medium
CVE-2021-22096
Improper Output Neutralization for Logs in Spring Framework
Medium
CVE-2021-22097
Deserialization of Untrusted Data in Spring AMQP
Medium
CVE-2021-22047
Exposure of Resource to Wrong Sphere in Spring Data REST
High
CVE-2021-22044
Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign
Medium
CVE-2020-28957
Foxlor cross-site scripting (XSS) vulnerability
Critical
CVE-2021-42740
Improper Neutralization of Special Elements used in a Command in Shell-quote
Medium
CVE-2021-2471
Incorrect Authorization in MySQL Connector Java
High
CVE-2021-3869
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
High
CVE-2021-3846
Unrestricted File Upload vulnerability in Firefly III
Medium
CVE-2021-32609
Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (incl
High
CVE-2021-41971
Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with
Critical
CVE-2021-3878
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.