Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41284
Affects org.apache.tomcat:tomcat-catalina | Versions [9.0.0.M1,9.0.118)[10.1.0-M1,10.1.55)[11.0.0-M1,11.0.22)
Has fix
MavenPublished 13 May 2026
  • M
Improper Handling of Unicode EncodingCVE-2026-44288
Affects org.webjars.npm:protobufjs | Versions [0,]
Has fix
MavenPublished 13 May 2026
  • C
Session FixationCVE-2026-40010
Affects org.apache.wicket:wicket-auth-roles | Versions [8.0.0-M1,10.9.0)
Has fix
MavenPublished 12 May 2026
  • H
Directory TraversalCVE-2026-6321
Affects org.webjars.npm:fast-uri | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • C
Eval InjectionCVE-2026-44643
Affects org.webjars.npm:angular-expressions | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-36764
Affects org.springblade:blade-starter-report | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • M
Exposed Dangerous Method or FunctionCVE-2026-6402
Affects org.webjars.npm:webpack-dev-server | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • M
Arbitrary Code InjectionCVE-2026-41159
Affects org.webjars.npm:mermaid | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • M
Arbitrary Code InjectionCVE-2026-41149
Affects org.webjars.npm:mermaid | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • M
Arbitrary Code InjectionCVE-2026-41148
Affects org.webjars.npm:mermaid | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • M
Infinite loopCVE-2026-41150
Affects org.webjars.npm:mermaid | Versions [0,]
Has fix
MavenPublished 12 May 2026
  • C
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')CVE-2026-41883
Affects org.omnifaces:omnifaces | Versions [,1.14.2)[2.0-RC1,2.7.32)[3.0-RC1,3.14.16)[4.0-M1,4.7.5)[5.0-M1,5.2.3)
Has fix
MavenPublished 11 May 2026
  • H
Incorrect AuthorizationCVE-2026-44221
Affects com.arcadedb:arcadedb-engine | Versions [,26.4.2)
Has fix
MavenPublished 11 May 2026
  • H
Incorrect AuthorizationCVE-2026-44221
Affects com.arcadedb:arcadedb-server | Versions [,26.4.2)
Has fix
MavenPublished 11 May 2026
  • M
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-7045
Affects com.baomidou:dynamic-datasource-spring-boot-common | Versions [2.5.0,]
Has fix
MavenPublished 11 May 2026
  • M
Cross-site Scripting (XSS)CVE-2026-42338
Affects org.webjars.npm:ip-address | Versions [0,]
Has fix
MavenPublished 11 May 2026
  • C
Remote Code Execution (RCE)CVE-2026-32604
Affects io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo | Versions [,2026.0.1)
Has fix
MavenPublished 11 May 2026
  • C
Remote Code Execution (RCE)CVE-2026-32613
Affects io.spinnaker.echo:echo-pipelinetriggers | Versions [,2025.3.2)[2025.4.0,2025.4.2)[2026.0.0,2026.0.1)
Has fix
MavenPublished 11 May 2026
  • H
Insertion of Sensitive Information into Log FileCVE-2026-34164
Affects com.ritense.valtimo:inbox | Versions [13.0.0.RELEASE,13.22.0.RELEASE)
Has fix
MavenPublished 11 May 2026
  • M
Improper Isolation or Compartmentalization
Affects org.webjars.npm:vm2 | Versions [0,]
Has fix
MavenPublished 11 May 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-41705
Affects org.springframework.ai:spring-ai-typesense-store | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-41705
Affects org.springframework.ai:spring-ai-milvus-store | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • H
Missing AuthorizationCVE-2026-41712
Affects org.springframework.ai:spring-ai-openai | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • C
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')CVE-2026-8178
Affects com.amazon.redshift:redshift-jdbc42 | Versions [,2.2.2)
Has fix
MavenPublished 10 May 2026
  • M
Cross-site Scripting (XSS)CVE-2026-42509
Affects org.apache.wicket:wicket-extensions | Versions [,10.9.0)
Has fix
MavenPublished 10 May 2026
  • M
Cross-site Scripting (XSS)CVE-2026-42509
Affects org.apache.wicket:wicket-core | Versions [,10.9.0)
Has fix
MavenPublished 10 May 2026
  • H
Directory TraversalCVE-2026-43646
Affects org.apache.wicket:wicket-core | Versions [,10.9.0)
Has fix
MavenPublished 10 May 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40989
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,4.3.3)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 10 May 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40990
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,4.3.3)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 10 May 2026
  • M
Uncaught ExceptionCVE-2026-8149
Affects org.bouncycastle:bc-fips-debug | Versions [2.1.0,2.1.2)
Has fix
MavenPublished 10 May 2026