Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Insertion of Sensitive Information into Log File
CVE-2025-62262
Affects
com.liferay:com.liferay.portal.security.ldap.impl
| Versions
[,4.0.54)
M
Open Redirect
CVE-2025-62253
Affects
com.liferay:com.liferay.layout.admin.web
| Versions
[,5.0.157)
M
Cleartext Storage of Sensitive Information
CVE-2025-62261
Affects
com.liferay.portal:com.liferay.portal.impl
| Versions
[,93.0.0)
M
Missing Authentication for Critical Function
CVE-2025-62259
Affects
com.liferay.portal:com.liferay.portal.impl
| Versions
[,97.0.0)
M
Session Fixation
CVE-2025-12390
Affects
org.keycloak:keycloak-services
| Versions
[,26.0.0)
H
Command Injection
CVE-2025-64140
Affects
org.jenkins-ci.plugins:azure-cli
| Versions
[0,]
M
Cleartext Transmission of Sensitive Information
CVE-2025-64144
Affects
io.jenkins.plugins:byteguard-build-actions
| Versions
[0,]
M
Cleartext Transmission of Sensitive Information
CVE-2025-64143
Affects
com.openshift.jenkins:openshift-pipeline
| Versions
[0,]
M
Cross-site Request Forgery (CSRF)
CVE-2025-64141
Affects
org.jenkins-ci.plugins:nexus-task-runner
| Versions
[0,]
M
Missing Authorization
CVE-2025-64142
Affects
org.jenkins-ci.plugins:nexus-task-runner
| Versions
[0,]
M
Missing Authorization
CVE-2025-64139
Affects
org.jenkins-ci.plugins:windocks-start-container
| Versions
[0,]
H
XML External Entity (XXE) Injection
CVE-2025-64134
Affects
org.jenkins-ci.plugins:jdepend
| Versions
[0,]
M
Cleartext Transmission of Sensitive Information
CVE-2025-64147
Affects
org.jenkins-ci.plugins:curseforge-publisher
| Versions
[0,]
M
Cross-site Request Forgery (CSRF)
CVE-2025-64133
Affects
jp.ikedam.jenkins.plugins:extensible-choice-parameter
| Versions
[0,]
M
Cross-site Request Forgery (CSRF)
CVE-2025-64138
Affects
org.jenkins-ci.plugins:windocks-start-container
| Versions
[0,]
H
Insecure Default Initialization of Resource
CVE-2025-64135
Affects
io.jenkins.plugins:eggplant-runner
| Versions
[0,]
M
Cleartext Transmission of Sensitive Information
CVE-2025-64145
Affects
io.jenkins.plugins:byteguard-build-actions
| Versions
[0,]
M
Cleartext Transmission of Sensitive Information
CVE-2025-64146
Affects
org.jenkins-ci.plugins:curseforge-publisher
| Versions
[0,]
M
Missing Authorization
CVE-2025-64132
Affects
io.jenkins.plugins:mcp-server
| Versions
[,0.86.v7d3355e6a_a_18)
M
Missing Authorization
CVE-2025-64137
Affects
org.jenkins-ci.plugins:themis
| Versions
[0,]
M
Cross-site Request Forgery (CSRF)
CVE-2025-64136
Affects
org.jenkins-ci.plugins:themis
| Versions
[0,]
M
Cross-site Request Forgery (CSRF)
CVE-2025-64149
Affects
org.jenkins-ci.plugins:publish-to-bitbucket
| Versions
[0,]
M
Missing Authorization
CVE-2025-64150
Affects
org.jenkins-ci.plugins:publish-to-bitbucket
| Versions
[0,]
M
Missing Authorization
CVE-2025-64148
Affects
org.jenkins-ci.plugins:publish-to-bitbucket
| Versions
[0,]
H
Replay Attack
CVE-2025-64131
Affects
org.jenkins-ci.plugins:saml
| Versions
[,4.583.585.v22ccc1139f55)
H
Allocation of Resources Without Limits or Throttling
CVE-2025-62260
Affects
com.liferay:com.liferay.portal.vulcan.impl
| Versions
[,5.0.104)
H
Cross-site Request Forgery (CSRF)
CVE-2025-62258
Affects
com.liferay:com.liferay.headless.discovery.web
| Versions
[0,]
H
Untrusted Search Path
CVE-2025-49124
Affects
org.apache.tomcat:tomcat
| Versions
[9.0.23,9.0.106)
[10.1.0,10.1.42)
[11.0.0-M1,11.0.8)
H
Untrusted Search Path
CVE-2025-49124
Affects
org.apache.tomcat:tomcat-catalina
| Versions
[9.0.23,9.0.106)
[10.1.0,10.1.42)
[11.0.0-M1,11.0.8)
H
Untrusted Search Path
CVE-2025-49124
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[9.0.23,9.0.106)
[10.1.0,10.1.42)
[11.0.0-M1,11.0.8)