Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Prototype PollutionCVE-2025-64718
Affects org.webjars.bowergithub.nodeca:js-yaml | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • M
Prototype PollutionCVE-2025-64718
Affects org.webjars.npm:js-yaml | Versions [,4.1.1)
Has fix
MavenPublished 14 Nov 2025
  • M
Prototype PollutionCVE-2025-64718
Affects org.webjars.bower:js-yaml | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • M
Prototype PollutionCVE-2025-64718
Affects org.webjars:js-yaml | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • L
Cross-site Scripting (XSS)CVE-2025-59840
Affects org.webjars.npm:vega-interpreter | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • L
Cross-site Scripting (XSS)CVE-2025-59840
Affects org.webjars.npm:vega-expression | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • L
Cross-site Scripting (XSS)CVE-2025-59840
Affects org.webjars.bowergithub.vega:vega | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • L
Cross-site Scripting (XSS)CVE-2025-59840
Affects org.webjars.bower:vega | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • L
Cross-site Scripting (XSS)CVE-2025-59840
Affects org.webjars.npm:vega | Versions [0,]
Has fix
MavenPublished 14 Nov 2025
  • H
Improper Certificate ValidationCVE-2021-0341
Affects com.squareup.okhttp3:okhttp | Versions [,4.9.2)
Has fix
MavenPublished 14 Nov 2025
  • C
Arbitrary Code InjectionCVE-2025-64099
Affects org.openidentityplatform.openam:openam-oauth2 | Versions [,16.0.3)
Has fix
MavenPublished 13 Nov 2025
  • H
XML External Entity (XXE) InjectionCVE-2025-64518
Affects org.cyclonedx:cyclonedx-core-java | Versions [2.1.0,11.0.1)
Has fix
MavenPublished 12 Nov 2025
  • H
Server-side Template Injection (SSTI)
Affects freemarker:freemarker | Versions [0,]
Has fix
MavenPublished 10 Nov 2025
  • H
XML External Entity (XXE) InjectionCVE-2025-10713
Affects org.wso2.carbon.mediation:org.wso2.carbon.localentry | Versions [0,4.7.268)
Has fix
MavenPublished 7 Nov 2025
  • C
Arbitrary Code InjectionCVE-2025-11093
Affects org.apache.synapse:synapse-extensions | Versions [,4.0.0-wso2v255)
Has fix
MavenPublished 7 Nov 2025
  • C
Arbitrary Code InjectionCVE-2025-11093
Affects org.apache.synapse:synapse-core | Versions [,4.0.0-wso2v255)
Has fix
MavenPublished 7 Nov 2025
  • L
Improper Validation of Integrity Check Value
Affects io.github.ascopes:protobuf-maven-plugin | Versions [,4.0.2)
Has fix
MavenPublished 5 Nov 2025
  • L
Missing Critical Step in AuthenticationCVE-2025-12150
Affects org.keycloak:keycloak-services | Versions [0,26.5.1)
Has fix
MavenPublished 5 Nov 2025
  • M
Cross-site Scripting (XSS)CVE-2025-62267
Affects com.liferay:com.liferay.dynamic.data.mapping.item.selector.web | Versions [,1.0.9)
Has fix
MavenPublished 4 Nov 2025
  • M
Missing AuthorizationCVE-2025-62275
Affects com.liferay:com.liferay.blogs.item.selector.web | Versions [,6.0.19)
Has fix
MavenPublished 4 Nov 2025
  • H
Improper Validation of Certificate with Host MismatchCVE-2025-59250
Affects com.microsoft.sqlserver:mssql-jdbc | Versions [,10.2.4.jre8)[11.1.0.jre11-preview, 11.2.4.jre8)[12.1.0.jre11-preview, 12.2.1.jre8)[12.3.0.jre11-preview, 12.4.3.jre8)[12.5.0.jre11-preview, 12.6.5.jre8)[12.7.0.jre11-preview, 12.8.2.jre8)[12.9.0.jre11-preview, 12.10.2.jre8)[13.1.0.jre8-preview, 13.2.1.jre8)
Has fix
MavenPublished 4 Nov 2025
  • M
Use of Web Browser Cache Containing Sensitive InformationCVE-2025-62276
Affects com.liferay:com.liferay.adaptive.media.web | Versions [,5.0.52)
Has fix
MavenPublished 4 Nov 2025
  • M
Use of Web Browser Cache Containing Sensitive InformationCVE-2025-62276
Affects com.liferay.portal:com.liferay.portal.impl | Versions [,69.0.0)
Has fix
MavenPublished 4 Nov 2025
  • M
Cross-site Scripting (XSS)CVE-2025-62265
Affects com.liferay:com.liferay.portal.security.iframe.sanitizer | Versions [,1.0.1)
Has fix
MavenPublished 2 Nov 2025
  • M
Cross-site Scripting (XSS)CVE-2025-62264
Affects com.liferay:com.liferay.portal.language.override.web | Versions [,1.0.3)
Has fix
MavenPublished 2 Nov 2025
  • M
Sensitive Information in Resource Not Removed Before ReuseCVE-2025-11602
Affects org.neo4j:neo4j-bolt | Versions [5.26.0,5.26.15)[2025.10.1,2025.1.0)
Has fix
MavenPublished 31 Oct 2025
  • M
CRLF InjectionCVE-2025-8419
Affects org.keycloak:keycloak-services | Versions [,26.3.3)
Has fix
MavenPublished 31 Oct 2025
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2025-55163
Affects io.grpc:grpc-netty-shaded | Versions [,1.75.0)
Has fix
MavenPublished 31 Oct 2025
  • M
Brute ForceCVE-2025-62257
Affects com.liferay.portal:com.liferay.portal.impl | Versions [,60.0.0)
Has fix
MavenPublished 31 Oct 2025
  • M
Cross-site Scripting (XSS)CVE-2025-62263
Affects com.liferay:com.liferay.account.admin.web | Versions [,2.0.108)
Has fix
MavenPublished 30 Oct 2025