Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M Cross-site Scripting (XSS)	org.webjars:layui[,2.9.18)	Maven	9 Oct 2024
M Cross-site Scripting (XSS)	org.webjars.npm:layui[,2.9.18)	Maven	9 Oct 2024
M Cross-site Scripting (XSS)	org.webjars.npm:rollup[,4.24.0)	Maven	9 Oct 2024
M Information Exposure	org.webjars.npm:vite[,5.4.9)	Maven	9 Oct 2024
L Cross-site Scripting (XSS)	org.webjars.npm:vite[,5.4.9)	Maven	9 Oct 2024
H Prototype Pollution	org.webjars.bower:dompurify[0,]	Maven	9 Oct 2024
H Prototype Pollution	org.webjars.bowergithub.cure53:dompurify[0,]	Maven	9 Oct 2024
H Prototype Pollution	org.webjars.npm:dompurify[,2.5.6)[3.0.0,3.1.4)	Maven	9 Oct 2024
M Insertion of Sensitive Information into Log File	io.quarkiverse.cxf:quarkus-cxf[,3.15.2)	Maven	9 Oct 2024
M HTTP Request Smuggling	org.jboss.resteasy:resteasy-netty4[0,]	Maven	9 Oct 2024
C Improper Control of Generation of Code ('Code Injection')	com.ruoyi:ruoyi-generator[0,]	Maven	8 Oct 2024
H Uncontrolled Resource Consumption	org.kordamp.json:json-lib-core[,3.1.0)	Maven	4 Oct 2024
M Uncontrolled Resource Consumption	commons-io:commons-io[2.0,2.14.0)	Maven	3 Oct 2024
C Deserialization of Untrusted Data	org.apache.avro:avro[,1.11.4)	Maven	3 Oct 2024
M Allocation of Resources Without Limits or Throttling	com.liferay.portal:util-taglib[,8.4.6)	Maven	3 Oct 2024
M Allocation of Resources Without Limits or Throttling	com.liferay:com.liferay.image.uploader.web[,5.0.18)	Maven	3 Oct 2024
C Improper Authentication	org.jenkins-ci.plugins:oic-auth[,4.355.v3a_fb_fca_b_96d4)	Maven	3 Oct 2024
C Improper Authentication	org.jenkins-ci.plugins:oic-auth[,4.355.v3a_fb_fca_b_96d4)	Maven	3 Oct 2024
M Exposure of Sensitive Information to an Unauthorized Actor	org.jenkins-ci.plugins:credentials[,1371.1373.v4eb_fa_b_7161e9)(1371.1373.v4eb_fa_b_7161e9,1381.v2c3a_12074da_b_)	Maven	3 Oct 2024
M Incorrect Authorization	org.jenkins-ci.main:jenkins-core[,2.462.3)[2.466,2.479)	Maven	3 Oct 2024
M Information Exposure Through an Error Message	org.jenkins-ci.main:jenkins-core[,2.462.3)[2.466,2.479)	Maven	3 Oct 2024
M Open Redirect	org.glassfish.main.admin:rest-service[,7.0.17)	Maven	30 Sept 2024
L Deserialization of Untrusted Data	org.apache.lucene:lucene-replicator[4.4.0, 9.12.0)	Maven	30 Sept 2024
M Missing Authorization	org.eclipse.edc:control-plane-catalog[0.1.3,0.9.1)	Maven	27 Sept 2024
M Cleartext Storage of Sensitive Information	org.ovirt.engine.sdk:ovirt-engine-sdk-java[0,]	Maven	27 Sept 2024
H Insecure Storage of Sensitive Information	org.apache.maven.plugins:maven-archetype-plugin[3.2.1,3.3.0)	Maven	26 Sept 2024
M Creation of Temporary File in Directory with Insecure Permissions	org.apache.hadoop:hadoop-common[,3.4.0)	Maven	25 Sept 2024
H Inadequate Encryption Strength	org.apache.linkis:linkis-engineplugin-spark[1.3.0,1.6.0)	Maven	25 Sept 2024
M Arbitrary File Read	org.jenkins-ci.main:remoting[,3206.3208.v409508a_675ff)[3248.v65ecb_254c298,3248.3250.v3277a_8e88c9b_)[3256.v4da_9d93e1a_f3,3256.3258.v858f3c9a_f69d)	Maven	24 Sept 2024
H Allocation of Resources Without Limits or Throttling	org.apache.tomcat.embed:tomcat-embed-core[9.0.13,9.0.90)[10.1.0-M1,10.1.25)[11.0.0-M1,11.0.0-M21)	Maven	24 Sept 2024

APPLICATION

OPERATING SYSTEM