Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Deserialization of Untrusted DataCVE-2026-83557
Affects tools.jackson.core:jackson-databind | Versions [,3.1.6)[3.2.0,3.2.2)
Has fix
MavenPublished 2 Sept 2026
  • M
Deserialization of Untrusted DataCVE-2026-83557
Affects com.fasterxml.jackson.core:jackson-databind | Versions [,2.18.10)[2.19.0-rc2,2.21.6)[2.22.0,2.22.2)
Has fix
MavenPublished 2 Sept 2026
  • M
Reliance on Untrusted Inputs in a Security DecisionCVE-2026-16093
Affects org.keycloak:keycloak-server-spi-private | Versions [13.0.0,26.7.3)
Has fix
MavenPublished 1 Sept 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-58301
Affects org.apache.shiro:shiro-jakarta-ee | Versions [2.0.0-alpha-0,3.0.1)
Has fix
MavenPublished 1 Sept 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-71257
Affects org.apache.wicket:wicket-core | Versions [,8.19.0)[9.0.0-M1,9.24.0)[10.0.0-M1,10.11.0)
Has fix
MavenPublished 1 Sept 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-71378
Affects org.apache.wicket:wicket-core | Versions [9.1.0,9.24.0)[10.0.0-M1,10.11.0)
Has fix
MavenPublished 1 Sept 2026
  • M
Cross-site Scripting (XSS)CVE-2026-76982
Affects org.apache.wicket:wicket-core | Versions [6.25.0,8.19.0)[9.0.0-M1,9.24.0)[10.0.0-M1,10.11.0)
Has fix
MavenPublished 1 Sept 2026
  • M
Missing Authentication for Critical FunctionCVE-2026-82265
Affects io.zipkin:zipkin-server | Versions [0,]
Has fix
MavenPublished 1 Sept 2026
  • M
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')CVE-2026-19032
Affects tools.jackson.core:jackson-databind | Versions [3.0.0,3.1.6)[3.2.0,3.2.2)
Has fix
MavenPublished 1 Sept 2026
  • M
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')CVE-2026-19032
Affects com.fasterxml.jackson.core:jackson-databind | Versions [2.8.0-rc1,2.18.10)[2.19.0-rc1,2.21.6)[2.22.0-rc1,2.22.2)
Has fix
MavenPublished 1 Sept 2026
  • H
Unsafe ReflectionCVE-2026-40008
Affects org.apache.iotdb:iotdb-server | Versions [,2.0.10)
Has fix
MavenPublished 1 Sept 2026
  • H
Improper Privilege ManagementCVE-2026-40009
Affects org.apache.iotdb:node-commons | Versions [2.0.8,2.0.10)
Has fix
MavenPublished 1 Sept 2026
  • H
Improper Privilege ManagementCVE-2026-40009
Affects org.apache.iotdb:iotdb-server | Versions [2.0.8,2.0.10)
Has fix
MavenPublished 1 Sept 2026
  • H
Improper Neutralization of Special ElementsCVE-2026-55841
Affects org.graylog2:graylog2-server | Versions [,6.3.12)[7.0.0,7.0.7)[7.1.1,7.1.2)
Has fix
MavenPublished 1 Sept 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-55867
Affects org.graylog2:graylog2-server | Versions [6.2.0,6.3.12)[7.0.0,7.0.7)[7.1.1,7.1.2)
Has fix
MavenPublished 1 Sept 2026
  • M
XML External Entity (XXE) InjectionCVE-2026-55848
Affects org.mapfish.print:print-lib | Versions [3.0.0,]
Has fix
MavenPublished 1 Sept 2026
  • H
Incorrect AuthorizationCVE-2026-82463
Affects org.pac4j:pac4j-core | Versions [,6.5.6)
Has fix
MavenPublished 31 Aug 2026
  • M
Origin Validation ErrorCVE-2026-82465
Affects org.pac4j:pac4j-saml | Versions [,6.5.6)
Has fix
MavenPublished 31 Aug 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-82461
Affects org.pac4j:pac4j-oidc | Versions [,6.5.6)
Has fix
MavenPublished 31 Aug 2026
  • M
Origin Validation ErrorCVE-2026-82462
Affects org.pac4j:pac4j-oidc | Versions [,6.5.6)
Has fix
MavenPublished 31 Aug 2026
  • M
Open RedirectCVE-2026-82464
Affects org.pac4j:pac4j-core | Versions [,6.5.6)
Has fix
MavenPublished 31 Aug 2026
  • M
Information ExposureCVE-2026-55425
Affects org.graylog2:graylog2-server | Versions [7.1.0,7.1.4)
Has fix
MavenPublished 31 Aug 2026
  • H
Origin Validation ErrorCVE-2026-15075
Affects io.vertx:vertx-core | Versions [4.0.0.Beta1,4.5.30)[5.0.0.CR1,5.1.5)
Has fix
MavenPublished 31 Aug 2026
  • L
Incorrect AuthorizationCVE-2026-82594
Affects io.github.lognet:grpc-spring-boot-starter | Versions [0,]
Has fix
MavenPublished 31 Aug 2026
  • M
Directory TraversalCVE-2026-49488
Affects org.apache.openmeetings:openmeetings-web | Versions [5.0.0, 9.1.0)
Has fix
MavenPublished 30 Aug 2026
  • M
Directory TraversalCVE-2026-49488
Affects org.apache.openmeetings:openmeetings-server | Versions [5.0.0, 9.1.0)
Has fix
MavenPublished 30 Aug 2026
  • H
Improper Handling of URL Encoding (Hex Encoding)CVE-2026-41041
Affects org.apache.gravitino:gravitino-mcp-server | Versions [,1.2.1)
Has fix
MavenPublished 30 Aug 2026
  • C
Improper Certificate ValidationCVE-2026-71290
Affects org.apache.httpcomponents.client5:httpclient5 | Versions [,5.6.4)
Has fix
MavenPublished 30 Aug 2026
  • H
Incorrect AuthorizationCVE-2026-61899
Affects org.apache.tapestry:tapestry-core | Versions [5.5.0, 5.9.1)
Has fix
MavenPublished 30 Aug 2026
  • H
Directory TraversalCVE-2026-61372
Affects org.apache.jena:jena-fuseki-main | Versions [,6.2.0)
Has fix
MavenPublished 30 Aug 2026