Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Information Exposure		org.webjars.npm:serve-handler[0,]Maven15 Jun 2025
  • H
Deserialization of Untrusted Data		org.apache.kafka:kafka-clients[2.3.0,3.9.1)Maven13 Jun 2025
  • H
Deserialization of Untrusted Data		org.apache.kafka:kafka-clients[2.0.0,3.9.1)Maven13 Jun 2025
  • C
Deserialization of Untrusted Data		org.apache.inlong:manager-service[1.13.0,2.1.0)Maven13 Jun 2025
  • C
Deserialization of Untrusted Data		org.apache.inlong:manager-pojo[1.13.0,2.1.0)Maven13 Jun 2025
  • M
HTTP Response Splitting		org.springframework:spring-web[6.0.5,6.1.21)[6.2.0,6.2.8)Maven13 Jun 2025
  • M
Regular Expression Denial of Service (ReDoS)		org.apereo.cas:cas-server-core-configuration-metadata-repository[,6.0.0)Maven12 Jun 2025
  • H
Incorrect Implementation of Authentication Algorithm		org.postgresql:postgresql[42.7.4,42.7.7)Maven12 Jun 2025
  • M
Incomplete Filtering of Special Elements		org.webjars:angular-sanitize[1.0.7,)Maven11 Jun 2025
  • M
Incomplete Filtering of Special Elements		org.webjars.bower:angular-sanitize[1.0.7,)Maven11 Jun 2025
  • M
Incomplete Filtering of Special Elements		org.webjars.npm:angular-sanitize[1.2.29,)Maven11 Jun 2025
  • H
Server-side Request Forgery (SSRF)		org.apache.kafka:kafka-clients[3.1.0,3.9.1)Maven11 Jun 2025
  • M
Arbitrary File Upload		xyz.erupt:erupt[0,]Maven11 Jun 2025
  • M
Cross-site Scripting (XSS)		org.jenkins-ci.plugins:gatling[136.vb_9009b_3d33a_e,]Maven9 Jun 2025
  • M
Information Exposure		com.fasterxml.jackson.core:jackson-core[2.0.0,2.13.0-rc1)Maven8 Jun 2025
  • M
Insertion of Sensitive Information into Log File		com.erudika:para-server[0,]Maven6 Jun 2025
  • M
Cross-site Scripting (XSS)		org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui[,7.5.12)Maven5 Jun 2025
  • C
Uncaught Exception		org.webjars.npm:multer[0,]Maven4 Jun 2025
  • M
Exposed Dangerous Method or Function		org.webjars.npm:webpack-dev-server[0,]Maven4 Jun 2025
  • M
Arbitrary Code Injection		org.hibernate.validator:hibernate-validator[,6.2.0.CR1)[7.0.0.Alpha1,7.0.0.CR1)Maven4 Jun 2025
  • H
Origin Validation Error		org.webjars.npm:webpack-dev-server[0,]Maven4 Jun 2025
  • H
Incorrect Authorization		com.ritense.valtimo:object-management[11.0.0.RELEASE,12.13.0.RELEASE)Maven4 Jun 2025
  • H
Incorrect Authorization		com.ritense.valtimo:objecten-api[11.0.0.RELEASE,12.13.0.RELEASE)Maven4 Jun 2025
  • M
Insertion of Sensitive Information into Log File		com.erudika:para-server[0,]Maven3 Jun 2025
  • H
Improper Link Resolution Before File Access ('Link Following')		org.webjars.npm:tar-fs[0,]Maven3 Jun 2025
  • H
Unintended Proxy or Intermediary ('Confused Deputy')		org.springframework.cloud:spring-cloud-gateway-server-mvc[,4.1.8)[4.2.0,4.2.3)Maven30 May 2025
  • H
Unintended Proxy or Intermediary ('Confused Deputy')		org.springframework.cloud:spring-cloud-gateway-server[,3.1.10)[4.0.0,4.1.8)[4.2.0,4.2.3)Maven30 May 2025
  • M
Improper Handling of Case Sensitivity		org.apache.tomcat:tomcat-catalina[9.0.0.M1,9.0.105)[10.1.0-M1,10.1.41)[11.0.0-M1,11.0.7)Maven30 May 2025
  • M
Improper Handling of Case Sensitivity		org.apache.tomcat.embed:tomcat-embed-core[9.0.0.M1,9.0.105)[10.1.0-M1,10.1.41)[11.0.0-M1,11.0.7)Maven30 May 2025
  • H
Cross-site Request Forgery (CSRF)		com.liferay:com.liferay.layout.admin.web[,4.0.26)Maven29 May 2025