Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • L
Access Restriction Bypass		libspring-java<3.0.6.RELEASE-10debian:923 Jan 2014
  • L
Access Restriction Bypass		libspring-java<3.0.6.RELEASE-10debian:1323 Jan 2014
  • L
Access Restriction Bypass		libspring-java<3.0.6.RELEASE-10debian:1323 Jan 2014
  • M
Improper Authentication		libspring-ldap-java<1.3.1.RELEASE-4+deb7u1build0.14.04.1ubuntu:14.0427 Nov 2017
  • H
Improper Authentication		libspring-ldap-java<1.3.1.RELEASE-5+deb8u1debian:827 Nov 2017
  • H
Insufficiently Protected Credentials		libspring-security-2.0-java<2.0.7.RELEASE-3+deb8u2debian:824 Jul 2019
  • M
Insufficient Entropy in PRNG		libspring-security-2.0-java<2.0.7.RELEASE-3+deb8u1debian:89 Apr 2019
  • H
Insufficient Verification of Data Authenticity		libspring-security-2.0-java*debian:819 Dec 2018
  • M
Race Condition		libspring-security-2.0-java<2.0.7.RELEASE-1debian:85 Dec 2012
  • L
Information Exposure		libspring-security-2.0-java*ubuntu:14.045 Dec 2012
  • M
Arbitrary Code Injection		libspring-security-2.0-java<2.0.7.RELEASE-1debian:85 Dec 2012
  • M
Access Restriction Bypass		libspring-security-2.0-java<2.0.7.RELEASE-1debian:84 Oct 2011
  • M
Access Restriction Bypass		libspring-security-2.0-java*ubuntu:14.044 Oct 2011
  • M
Deserialization of Untrusted Data		org.amqphub.spring-amqp-10-jms-spring-boot-parent*rhel:927 Oct 2023
  • M
Deserialization of Untrusted Data		org.amqphub.spring-amqp-10-jms-spring-boot-parent*rhel:827 Oct 2023
  • M
Deserialization of Untrusted Data		org.amqphub.spring-amqp-10-jms-spring-boot-parent*rhel:727 Oct 2023
  • M
Rebind Flaw		org.apache.camel:camel-spring[2.22.0,3.2.0)Maven14 May 2020
  • H
Cross-site Request Forgery (CSRF)		org.apache.cxf.fediz:fediz-spring[1.2.4,1.3.0)[1.3.2,1.3.3)[1.4.0,1.4.3)Maven10 Dec 2017
  • H
Cross-site Request Forgery (CSRF)		org.apache.cxf.fediz:fediz-spring[,1.2.4)[1.3.0,1.3.2)Maven31 Aug 2017
  • H
Cross-site Request Forgery (CSRF)		org.apache.cxf.fediz:fediz-spring2[,1.3.3)[1.4.0,1.4.3)Maven10 Dec 2017
  • H
Cross-site Request Forgery (CSRF)		org.apache.cxf.fediz:fediz-spring2[,1.2.4)[1.3.0,1.3.2)Maven31 Aug 2017
  • H
Cross-site Request Forgery (CSRF)		org.apache.cxf.fediz:fediz-spring3[,1.3.3)[1.4.0,1.4.3)Maven10 Dec 2017
  • M
Deserialization of Untrusted Data		org.apache.james:james-server-spring[,3.7.5)[3.8.0,3.8.1)Maven28 Feb 2024
  • C
Access Restriction Bypass		org.apache.shenyu:shenyu-spring-boot-starter-client-apache-dubbo[,2.4.2)Maven25 Jan 2022
  • M
Interpretation Conflict		org.apache.shiro:shiro-spring-boot-starter[,1.11.0)Maven22 Jan 2023
  • C
Authentication Bypass		org.apache.shiro:shiro-spring-boot-web-starter[0, 1.7.0)Maven10 Dec 2020
  • C
Use of Hard-coded Credentials		org.folio:mod-data-export-spring[,3.0.0)Maven26 Jul 2023
  • M
Session Fixation		org.infinispan:infinispan-spring5-common[,9.4.15.Final)[10.0.0.Alpha1,10.0.0.Beta4)Maven2 Jan 2020
  • M
Session Fixation		org.infinispan:infinispan-spring5-embedded[,9.4.15.Final)[10.0.0.Alpha1,10.0.0.Beta4)Maven2 Jan 2020
  • M
Session Fixation		org.infinispan:infinispan-spring5-remote[,9.4.15.Final)[10.0.0.Alpha1,10.0.0.Beta4)Maven2 Jan 2020