İçeriğe atla
Noroxi

vaadin kayıtları

vaadin üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%92,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2021-31407
    31İzleyin

    Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

    YüksekCVSS 7,5İstismar yokEPSS %2

    vaadin · flow23 Nis 2021

  • CVE-2020-36320
    31İzleyin

    Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7

    YüksekCVSS 7,5İstismar yokEPSS %2

    vaadin · vaadin23 Nis 2021

  • CVE-2021-31410
    31İzleyin

    Project sources exposure in Vaadin Designer

    YüksekCVSS 7,5İstismar yokEPSS %2

    vaadin · designer23 Nis 2021

  • CVE-2021-31409
    31İzleyin

    Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

    YüksekCVSS 7,5İstismar yokEPSS %2

    vaadin · vaadin6 May 2021

  • CVE-2021-31411
    31İzleyin

    Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19

    YüksekCVSS 7,8İstismar yokEPSS %0

    vaadin · flow5 May 2021

  • CVE-2020-36321
    30İzleyin

    Directory traversal in development mode handler in Vaadin 14 and 15-17

    YüksekCVSS 7,5İstismar yokEPSS %1

    vaadin · flow23 Nis 2021

  • CVE-2021-31405
    30İzleyin

    Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

    YüksekCVSS 7,5İstismar yokEPSS %1

    vaadin · flow23 Nis 2021

  • CVE-2022-29567
    30İzleyin

    Possible information disclosure inside TreeGrid component with default data provider

    YüksekCVSS 7,5İstismar yokEPSS %1

    vaadin · vaadin24 May 2022

  • CVE-2021-31408
    28İzleyin

    Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

    YüksekCVSS 7,1İstismar yokEPSS %0

    vaadin · flow23 Nis 2021

  • CVE-2020-36319
    26İzleyin

    Potential sensitive data exposure in applications using Vaadin 15

    OrtaCVSS 6,5İstismar yokEPSS %1

    vaadin · flow23 Nis 2021

  • CVE-2023-25499
    26İzleyin

    Possible information disclosure in non visible components

    OrtaCVSS 6,5İstismar yokEPSS %1

    vaadin · vaadin22 Haz 2023

  • CVE-2021-33611
    24İzleyin

    Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

    OrtaCVSS 6,1İstismar yokEPSS %1

    vaadin · vaadin2 Kas 2021

  • CVE-2019-25028
    24İzleyin

    Stored cross-site scripting in Grid component in Vaadin 7 and 8

    OrtaCVSS 6,1İstismar yokEPSS %1

    vaadin · vaadin23 Nis 2021

  • CVE-2019-25027
    24İzleyin

    Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13

    OrtaCVSS 6,1İstismar yokEPSS %1

    vaadin · flow23 Nis 2021

  • CVE-2021-31412
    21İzleyin

    Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

    OrtaCVSS 5,3İstismar yokEPSS %1

    vaadin · flow24 Haz 2021

  • CVE-2026-2742
    21İzleyin

    Unauthorized session creation via reserved framework path access

    OrtaCVSS 5,3İstismar yokEPSS %0

    vaadin · vaadin10 Mar 2026

  • CVE-2011-0509
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown v

    OrtaCVSS 4,3İstismar yokEPSS %2

    vaadin · vaadin20 Oca 2011

  • CVE-2021-33609
    17İzleyin

    Denial of service in DataCommunicator class in Vaadin 8

    OrtaCVSS 4,3İstismar yokEPSS %1

    vaadin · vaadin13 Eki 2021

  • CVE-2021-33605
    17İzleyin

    Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20

    OrtaCVSS 4,3İstismar yokEPSS %1

    vaadin · vaadin-checkbox-flow25 Ağu 2021

  • CVE-2018-25007
    17İzleyin

    Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11

    OrtaCVSS 4,3İstismar yokEPSS %1

    vaadin · flow23 Nis 2021

  • CVE-2023-25500
    17İzleyin

    Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1

    OrtaCVSS 4,3İstismar yokEPSS %1

    vaadin · vaadin22 Haz 2023

  • CVE-2021-31403
    10İzleyin

    Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8

    DüşükCVSS 2,5İstismar yokEPSS %0

    vaadin · vaadin23 Nis 2021

  • CVE-2021-33604
    10İzleyin

    Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

    DüşükCVSS 2,5İstismar yokEPSS %0

    vaadin · flow-server24 Haz 2021

  • CVE-2021-31406
    10İzleyin

    Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

    DüşükCVSS 2,5İstismar yokEPSS %0

    vaadin · flow23 Nis 2021

  • CVE-2021-31404
    10İzleyin

    Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18

    DüşükCVSS 2,5İstismar yokEPSS %0

    vaadin · flow23 Nis 2021