Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Inadequate Encryption StrengthCVE-2025-68703
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • C
Improper Neutralization of Special Elements in Data Query LogicCVE-2025-66169
Affects org.apache.camel:camel-neo4j | Versions [4.10.0,4.10.8)[4.14.0,4.14.3)[4.15.0,4.17.0)
Has fix
MavenPublished 14 Jan 2026
  • M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2025-15056
Affects org.webjars.npm:quill | Versions [0,]
Has fix
MavenPublished 14 Jan 2026
  • H
Missing XML ValidationCVE-2025-68493
Affects org.apache.struts:struts2-core | Versions [,6.1.1)
Has fix
MavenPublished 13 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-65110
Affects org.webjars.npm:vega-selections | Versions [0,]
Has fix
MavenPublished 13 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-66648
Affects org.webjars.npm:vega-functions | Versions [5.8.0,]
Has fix
MavenPublished 13 Jan 2026
  • H
Server-side Request Forgery (SSRF)CVE-2025-61916
Affects io.spinnaker.clouddriver:clouddriver-aws | Versions [,2025.1-6)[2025.2.0,2025.2-3)
Has fix
MavenPublished 13 Jan 2026
  • H
Server-side Request Forgery (SSRF)CVE-2025-61916
Affects io.spinnaker.orca:orca-clouddriver | Versions [,2025.1-6)[2025.2.0,2025.2-3)
Has fix
MavenPublished 13 Jan 2026
  • H
XML External Entity (XXE) InjectionCVE-2025-68280
Affects org.apache.sis.core:sis-metadata | Versions [0.4,]
Has fix
MavenPublished 13 Jan 2026
  • H
Directory TraversalCVE-2025-66518
Affects org.apache.kyuubi:kyuubi-server_2.12 | Versions [1.6.0,1.11.0)
Has fix
MavenPublished 13 Jan 2026
  • H
Deserialization of Untrusted DataCVE-2025-10492
Affects net.sf.jasperreports:jasperreports | Versions [0,]
Has fix
MavenPublished 13 Jan 2026
  • C
Improper Neutralization of Special Elements Used in a Template Engine
Affects org.open-metadata:openmetadata-service | Versions [,1.11.4)
Has fix
MavenPublished 11 Jan 2026
  • M
Incorrect Behavior Order: Authorization Before Parsing and CanonicalizationCVE-2026-0707
Affects org.keycloak:keycloak-services | Versions [9.0.0,]
Has fix
MavenPublished 11 Jan 2026
  • C
Access of Resource Using Incompatible Type ('Type Confusion')CVE-2026-22028
Affects org.webjars.npm:preact | Versions [10.26.5,10.26.10)[10.27.0,10.27.3)[10.28.0,10.28.2)
Has fix
MavenPublished 10 Jan 2026
  • H
Unsafe Dependency ResolutionCVE-2025-70974
Affects com.alibaba:fastjson | Versions [,1.2.48)
Has fix
MavenPublished 9 Jan 2026
  • M
Improper Validation of Syntactic Correctness of InputCVE-2025-12543
Affects io.undertow:undertow-core | Versions [,2.3.21.Final)[2.4.0.Alpha1,]
Has fix
MavenPublished 9 Jan 2026
  • H
Cross-site Scripting (XSS)CVE-2026-22029
Affects org.webjars.npm:react-router | Versions [7.0.0,7.12.0)
Has fix
MavenPublished 9 Jan 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-22030
Affects org.webjars.npm:react-router | Versions [7.0.0,7.12.0)
Has fix
MavenPublished 9 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2026-21884
Affects org.webjars.npm:react-router | Versions [7.0.0,7.12.0)
Has fix
MavenPublished 9 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-59057
Affects org.webjars.npm:react-router | Versions [7.0.0,7.9.0)
Has fix
MavenPublished 9 Jan 2026
  • H
Open RedirectCVE-2025-68470
Affects org.webjars.npm:react-router | Versions [,6.30.2)[7.0.0,7.9.6)
Has fix
MavenPublished 9 Jan 2026
  • C
External Control of File Name or PathCVE-2025-68428
Affects org.webjars.npm:jspdf | Versions [,4.0.0)
Has fix
MavenPublished 8 Jan 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2025-66560
Affects io.quarkus.vertx.utils:quarkus-vertx-utils | Versions [,3.20.5)[3.21.0.CR1,3.27.2)[3.28.0.CR1,3.31.0)
Has fix
MavenPublished 8 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-15022
Affects com.vaadin:vaadin-server | Versions [7.0.0,7.7.50)[8.0.0,8.30.0)
Has fix
MavenPublished 5 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-15022
Affects com.vaadin:vaadin-spreadsheet-flow | Versions [23.1.0,23.6.6)[24.0.0,24.8.14)[24.9.0,24.9.6)
Has fix
MavenPublished 5 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-15451
Affects com.xnx3.wangmarket:wangmarket | Versions [0,]
Has fix
MavenPublished 5 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-15452
Affects com.xnx3.wangmarket:wangmarket | Versions [0,]
Has fix
MavenPublished 5 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-15416
Affects com.xnx3.wangmarket:wangmarket | Versions [0,]
Has fix
MavenPublished 4 Jan 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-21452
Affects org.msgpack:msgpack-core | Versions [0.7.0-M6,0.9.11)
Has fix
MavenPublished 4 Jan 2026
  • M
Cross-site Scripting (XSS)
Affects org.webjars.npm:trix | Versions [0,]
Has fix
MavenPublished 1 Jan 2026