Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Missing Critical Step in AuthenticationCVE-2026-57915
Affects org.apache.kerby:kerb-server | Versions [,2.1.2)
Has fix
MavenPublished 4 Jul 2026
  • H
Directory TraversalCVE-2025-64152
Affects org.apache.iotdb:iotdb-core | Versions [1.0.0,1.3.6)[2.0.0,2.0.7)
Has fix
MavenPublished 4 Jul 2026
  • H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')CVE-2026-57914
Affects org.apache.kerby:kerby-asn1 | Versions [,2.1.2)
Has fix
MavenPublished 4 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-54399
Affects org.apache.httpcomponents.core5:httpcore5-h2 | Versions [,5.4.2)[5.5-alpha1,5.5-beta1)
Has fix
MavenPublished 4 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-54428
Affects org.apache.httpcomponents.core5:httpcore5-h2 | Versions [,5.4.3)[5.5-alpha1,5.5-beta2)
Has fix
MavenPublished 4 Jul 2026
  • M
SQL InjectionCVE-2025-53648
Affects org.apache.gravitino:catalog-jdbc-common | Versions [0.5.0,1.0.0)
Has fix
MavenPublished 4 Jul 2026
  • H
Missing AuthorizationCVE-2026-46487
Affects org.geonetwork-opensource:gn-services | Versions [4.0.0-alpha.1,4.2.16)[4.4.0,4.4.11)
Has fix
MavenPublished 4 Jul 2026
  • M
Deserialization of Untrusted DataCVE-2026-55223
Affects com.mchange:c3p0 | Versions [,0.14.0)
Has fix
MavenPublished 4 Jul 2026
  • H
Not Failing Securely ('Failing Open')CVE-2026-53712
Affects com.ongres.scram:scram-client | Versions [,3.3)
Has fix
MavenPublished 3 Jul 2026
  • H
Not Failing Securely ('Failing Open')CVE-2026-53712
Affects com.ongres.scram:scram-common | Versions [,3.3)
Has fix
MavenPublished 3 Jul 2026
  • H
Deserialization of Untrusted DataCVE-2026-55153
Affects com.mchange:mchange-commons-java | Versions [,0.6.0)
Has fix
MavenPublished 2 Jul 2026
  • M
Sensitive Cookie with Improper SameSite AttributeCVE-2026-55688
Affects org.asynchttpclient:async-http-client | Versions [,2.16.0)[3.0.0.Beta1,3.0.11)
Has fix
MavenPublished 2 Jul 2026
  • H
Deserialization of Untrusted DataCVE-2026-14265
Affects software.amazon.jdbc:aws-advanced-jdbc-wrapper | Versions [3.3.0,4.0.1)
Has fix
MavenPublished 2 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-52760
Affects org.apache.activemq:apache-web-console | Versions [,5.19.8)[6.0.0,6.2.7)
Has fix
MavenPublished 1 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-52760
Affects org.apache.activemq:apache-activemq | Versions [,5.19.8)[6.0.0,6.2.7)
Has fix
MavenPublished 1 Jul 2026
  • H
Authentication Bypass by Alternate NameCVE-2026-56091
Affects org.apache.shiro:shiro-web | Versions [2.0.0-alpha-1,3.0.0)
Has fix
MavenPublished 1 Jul 2026
  • H
Authentication Bypass by Alternate NameCVE-2026-56091
Affects org.apache.shiro:shiro-guice | Versions [2.0.0-alpha-1,3.0.0)
Has fix
MavenPublished 1 Jul 2026
  • L
Replay AttackCVE-2026-56130
Affects org.apache.shiro:shiro-lang | Versions [1.2.4,3.0.0)
Has fix
MavenPublished 1 Jul 2026
  • L
Replay AttackCVE-2026-56130
Affects org.apache.shiro:shiro-core | Versions [1.2.4,3.0.0)
Has fix
MavenPublished 1 Jul 2026
  • L
Replay AttackCVE-2026-56130
Affects org.apache.shiro:shiro-web | Versions [1.2.4,3.0.0)
Has fix
MavenPublished 1 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-49328
Affects org.apache.fesod:fesod-sheet | Versions [,2.0.2-incubating)
Has fix
MavenPublished 1 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-44314
Affects org.traccar:traccar | Versions [,6.13.0)
Has fix
MavenPublished 1 Jul 2026
  • M
Missing AuthorizationCVE-2026-57294
Affects org.jenkins-ci.plugins:ec2-fleet | Versions [,4.2.3.540.va_6eedb_7b_c112)
Has fix
MavenPublished 1 Jul 2026
  • M
Missing AuthorizationCVE-2026-57299
Affects org.jenkins-ci.plugins:contrast-continuous-application-security | Versions [,3.12)
Has fix
MavenPublished 1 Jul 2026
  • M
Missing AuthorizationCVE-2026-57297
Affects org.jenkins-ci.plugins:contrast-continuous-application-security | Versions [,3.12)
Has fix
MavenPublished 1 Jul 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-57290
Affects org.jenkins-ci.plugins:priority-sorter | Versions [,936.937.v5581d0b_2ccb_a_ )
Has fix
MavenPublished 1 Jul 2026
  • M
Missing AuthorizationCVE-2026-57293
Affects org.jenkins-ci.plugins:gitee | Versions [,1292.v2559f2f3f2c0)
Has fix
MavenPublished 1 Jul 2026
  • M
Missing AuthorizationCVE-2026-57291
Affects org.jenkins-ci.plugins:gitee | Versions [,1292.v2559f2f3f2c0)
Has fix
MavenPublished 1 Jul 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-57292
Affects org.jenkins-ci.plugins:gitee | Versions [,1292.v2559f2f3f2c0)
Has fix
MavenPublished 1 Jul 2026
  • M
LDAP InjectionCVE-2026-57288
Affects org.jenkins-ci.plugins:active-directory | Versions [,2.41.2)
Has fix
MavenPublished 1 Jul 2026