Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Cross-site Request Forgery (CSRF)
com.liferay:com.liferay.layout.admin.web[,4.0.26)Maven29 May 2025
  • L
Cross-site Scripting (XSS)
org.webjars.bowergithub.vuetifyjs:vuetify[0,]Maven29 May 2025
  • L
Cross-site Scripting (XSS)
org.webjars.npm:vuetify[2.0.0,3.0.0)Maven29 May 2025
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
commons-beanutils:commons-beanutils[1.0,1.11.0)Maven29 May 2025
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
org.apache.commons:commons-beanutils2[2.0.0-M1,2.0.0-M2)Maven29 May 2025
  • C
Improper Handling of Invalid Use of Special Elements
org.apache.inlong:manager-pojo[1.13.0, 2.2.0)Maven28 May 2025
  • C
Improper Handling of Invalid Use of Special Elements
org.apache.inlong:manager-common[1.13.0, 2.2.0)Maven28 May 2025
  • C
Improper Handling of Invalid Use of Special Elements
org.apache.inlong:manager-pojo[1.13.0, 2.2.0)Maven28 May 2025
  • C
Improper Handling of Invalid Use of Special Elements
org.apache.inlong:manager-common[1.13.0, 2.2.0)Maven28 May 2025
  • H
Improper Handling of Unicode Encoding
org.apache.inlong:manager-pojo[1.7.0, 2.2.0)Maven28 May 2025
  • M
Incorrect Permission Assignment for Critical Resource
org.codelibs.fess:fess[,14.19.2)Maven27 May 2025
  • M
Information Exposure
org.webjars.npm:electron[0,]Maven26 May 2025
  • H
Function Call with Incorrectly Specified Arguments
org.webjars.npm:electron[0,]Maven25 May 2025
  • M
XML External Entity (XXE) Injection
org.eclipse.jgit:org.eclipse.jgit[,6.10.1.202505221210-r)[7.0.0.202409031743-r,7.0.1.202505221510-r)[7.1.0.202411261347-r,7.1.1.202505221757-r)[7.2.0.202503040940-r,7.2.1.202505142326-r)Maven23 May 2025
  • L
Server-side Request Forgery (SSRF)
org.apache.kylin:kylin-query-service[5.0.0,5.0.2)Maven21 May 2025
  • L
Server-side Request Forgery (SSRF)
org.apache.kylin:kylin-ops-server[5.0.0,5.0.2)Maven21 May 2025
  • L
Server-side Request Forgery (SSRF)
org.apache.kylin:kylin-datasource-service[5.0.0,5.0.2)Maven21 May 2025
  • L
Server-side Request Forgery (SSRF)
org.apache.kylin:kylin-core-common[5.0.0,5.0.2)Maven21 May 2025
  • C
Missing Authentication for Critical Function
org.springframework.security:spring-security-core[6.4.0,6.4.6)Maven20 May 2025
  • H
Uncaught Exception
org.webjars.npm:multer[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars:bootstrap-multiselect[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars.bower:bootstrap-multiselect[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars.npm:bootstrap-multiselect[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars.bowergithub.davidstutz:bootstrap-multiselect[0,]Maven20 May 2025
  • H
Missing Release of Memory after Effective Lifetime
org.webjars.npm:multer[0,]Maven20 May 2025
  • H
Improper Verification of Cryptographic Signature
org.webjars.npm:openpgp[0,]Maven20 May 2025
  • H
Improper Authentication
org.jenkins-ci.plugins:wso2id-oauth[0,]Maven19 May 2025
  • M
Prototype Pollution
org.webjars.npm:estree-util-value-to-estree[,3.3.3)Maven19 May 2025
  • H
Cross-site Scripting (XSS)
org.jenkins-ci.plugins:cloudbees-jenkins-advisor[,374.376.v3a_41a_a_142efe)Maven18 May 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.calendar.web[,4.0.0)Maven18 May 2025