Medium
CVE-2021-29039
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2021-29047
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Medium
CVE-2021-29041
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module
Medium
CVE-2021-20331
MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener
Medium
CVE-2021-20250
JBoss EJB Client information disclosure vulnerability
Medium
CVE-2021-22137
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2021-32560
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
Medium
CVE-2021-32561
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
Medium
CVE-2021-20717
EC-CUBE Cross-site scripting vulnerability
Unrated
pysec-2022-199
The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items() when inst
Medium
CVE-2020-13662
Drupal Core Open Redirect vulnerability
Medium
CVE-2021-21645
Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs
High
CVE-2021-21642
XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin
Medium
CVE-2021-21643
Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs
Medium
CVE-2021-21647
Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds
High
CVE-2021-21646
Remote code execution vulnerability in Jenkins Templating Engine Plugin
Medium
CVE-2021-21644
CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files
Medium
CVE-2020-28124
Cross Site Scripting (XSS) in LavaLite 5.8.0
High
CVE-2021-28458
Improper Privilege Management in Azure ms-rest-nodeauth
Medium
CVE-2021-30458
Wikimedia Parsoid vulnerable to Cross-site Scripting (XSS)
Medium
CVE-2021-22513
Missing permission checks in Micro Focus Application Automation Tools Plugin
High
CVE-2021-22510
Reflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-22511
SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-22512
CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.