Skip to content
OpenAdvisories

Archive

19 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /19 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.6
    GHSA-3h5r-928v-mxhh

    Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11

    Missing check in UIDL request handler in `com.vaadin:flow-server` versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. - https://vaadin.co…

    com.vaadin:vaadin-bom Maven
  • Low 3.1
    GHSA-76f4-fw33-6j2v

    Potential sensitive data exposure in applications using Vaadin 15

    Insecure configuration of default `ObjectMapper` in `com.vaadin:flow-server` versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. `@RestController` - https://vaadin.com/security/cve-2020-36319

    com.vaadin:vaadin-bom Maven