Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Deadlock
org.jboss.narayana.rts:lra-coordinator-jar[,7.1.0.Final)Maven3 Jan 2025
  • C
Deserialization of Untrusted Data
com.xuxueli:xxl-rpc-core[,1.8.1)Maven2 Jan 2025
  • L
Missing Authorization
org.apache.nifi:nifi-web-api[1.10.0,2.1.0)Maven29 Dec 2024
  • L
Missing Authorization
org.apache.nifi:nifi-framework-core-api[1.10.0,2.1.0)Maven29 Dec 2024
  • L
Missing Authorization
org.apache.nifi:nifi-framework-components[,2.1.0)Maven29 Dec 2024
  • L
Missing Authorization
org.apache.nifi:nifi-framework-cluster[1.10.0,2.1.0)Maven29 Dec 2024
  • L
Missing Authorization
org.apache.nifi:nifi-framework-api[1.10.0,2.1.0)Maven29 Dec 2024
  • L
Missing Authorization
org.apache.nifi:nifi-client-dto[1.10.0,2.1.0)Maven29 Dec 2024
  • C
Deserialization of Untrusted Data
org.apache.mina:mina-core[2.0.0,2.0.27)[2.1.0,2.1.10)[2.2.0,2.2.4)Maven25 Dec 2024
  • M
Authentication Bypass by Assumed-Immutable Data
org.apache.hugegraph:hugegraph-server[1.0.0,1.5.0)Maven25 Dec 2024
  • H
SQL Injection
com.amazon.redshift:redshift-jdbc42[2.1.0.31,2.1.0.32)Maven25 Dec 2024
  • H
Information Exposure
org.apache.spark:spark-hive-thriftserver_2.13[,3.3.4)[3.4.0,3.4.2)[3.5.0,3.5.1)Maven24 Dec 2024
  • H
Information Exposure
org.apache.spark:spark-hive-thriftserver_2.11[0,]Maven24 Dec 2024
  • H
Information Exposure
org.apache.spark:spark-hive-thriftserver_2.12[2.4.0,3.3.4)[3.4.0,3.4.2)[3.5.0,3.5.1)Maven24 Dec 2024
  • H
Information Exposure
org.apache.hive:hive-service[1.2.0,4.0.0)Maven24 Dec 2024
  • C
Time-of-check Time-of-use (TOCTOU) Race Condition
org.apache.tomcat.embed:tomcat-embed-core[9.0.0.M1,9.0.98)[10.1.0-M1,10.1.34)[11.0.0-M1,11.0.2)Maven22 Dec 2024
  • C
Time-of-check Time-of-use (TOCTOU) Race Condition
org.apache.tomcat:tomcat-catalina[9.0.0.M1,9.0.98)[10.1.0-M1,10.1.34)[11.0.0-M1,11.0.2)Maven22 Dec 2024
  • M
Improper Neutralization of Special Elements
ch.qos.logback:logback-classic[,1.3.15)[1.4.0,1.5.13)Maven20 Dec 2024
  • M
Improper Neutralization of Special Elements
ch.qos.logback:logback-core[,1.3.15)[1.4.0,1.5.13)Maven20 Dec 2024
  • L
Server-side Request Forgery (SSRF)
ch.qos.logback:logback-core[,1.3.15)[1.4.0,1.5.13)Maven20 Dec 2024
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.portal.security.service.access.policy.web[,5.0.25)Maven20 Dec 2024
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.oauth2.provider.scope.impl[,4.0.25)Maven20 Dec 2024
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.dispatch.web[,3.0.40)Maven19 Dec 2024
  • H
Incorrect Implementation of Authentication Algorithm
org.apache.kafka:kafka-clients[0.10.2.0, 3.7.2)[3.8.0, 3.8.1)Maven18 Dec 2024
  • C
Time-of-check Time-of-use (TOCTOU) Race Condition
org.apache.tomcat.embed:tomcat-embed-core[9.0.0.M1,9.0.98)[10.1.0-M1,10.1.34)[11.0.0-M1,11.0.2)Maven18 Dec 2024
  • C
Time-of-check Time-of-use (TOCTOU) Race Condition
org.apache.tomcat:tomcat-catalina[9.0.0.M1,9.0.98)[10.1.0-M1,10.1.34)[11.0.0-M1,11.0.2)Maven18 Dec 2024
  • M
Incorrect Authorization
org.elasticsearch:elasticsearch[8.16.0,8.16.2)Maven18 Dec 2024
  • M
Information Exposure
org.geoserver.web:gs-web-core[2.0.0,2.25.1)Maven17 Dec 2024
  • M
Cross-site Scripting (XSS)
org.webjars.bowergithub.basecamp:trix[0,]Maven17 Dec 2024
  • M
Cross-site Scripting (XSS)
org.webjars.npm:trix[0,]Maven17 Dec 2024