Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.term.web[,1.0.39)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.shipment.web[,4.0.62)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.pricing.web[,4.0.91)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.order.web[,5.0.98)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.inventory.web[,4.0.50)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.currency.web[,4.0.46)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.channel.web[,4.0.68)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.product.measurement.unit.web[,4.0.38)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.address.web[,4.0.50)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.account.web[,4.0.37)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.catalog.web[,4.0.47)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.product.options.web[,4.0.64)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.product.definitions.web[,7.0.120)Maven29 Apr 2025
  • M
Cross-site Request Forgery (CSRF)
com.liferay.commerce:com.liferay.commerce.order.rule.web[,1.0.34)Maven29 Apr 2025
  • H
Cross-site Request Forgery (CSRF)
com.liferay:com.liferay.users.admin.web[,6.0.115)Maven29 Apr 2025
  • H
Cross-site Request Forgery (CSRF)
com.liferay:com.liferay.frontend.js.spa.web[,5.0.44)Maven29 Apr 2025
  • H
Code Injection
org.apereo.cas:cas-management-webapp-support[0,]Maven29 Apr 2025
  • M
Regular Expression Denial of Service (ReDoS)
org.apereo.cas:cas-management-webapp-support[0,]Maven29 Apr 2025
  • H
SQL Injection
org.open-metadata:openmetadata-service[,1.5.0-rc1)Maven28 Apr 2025
  • M
Improper Input Validation
org.springframework.boot:spring-boot-actuator-autoconfigure[2.7.0,3.3.11)[3.4.0,3.4.5)Maven25 Apr 2025
  • H
Improper Certificate Validation
org.apache.httpcomponents.client5:httpclient5[5.4.0,5.4.3)Maven24 Apr 2025
  • M
Cross-site Scripting (XSS)
org.opencms:opencms-core[0,]Maven24 Apr 2025
  • M
Cross-site Scripting (XSS)
org.opencms:opencms-core[0,]Maven24 Apr 2025
  • M
Cross-site Scripting (XSS)
org.opencms:opencms-core[0,]Maven24 Apr 2025
  • M
Timing Attack
org.springframework.security:spring-security-crypto[6.3.8,6.3.9)[6.4.4,6.4.5)Maven23 Apr 2025
  • C
Arbitrary File Upload
net.mingsoft:ms-mcms[0,]Maven22 Apr 2025
  • M
Cross-site Scripting (XSS)
org.webjars.bower:jquery-validation[0,]Maven21 Apr 2025
  • M
Cross-site Scripting (XSS)
org.webjars.bowergithub.jquery-validation:jquery-validation[,1.20.0)Maven21 Apr 2025
  • M
Cross-site Scripting (XSS)
org.webjars:jquery-validation[,1.20.0)Maven21 Apr 2025
  • M
Cross-site Scripting (XSS)
org.webjars.npm:jquery-validation[,1.20.0)Maven21 Apr 2025