Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
C Time-of-check Time-of-use (TOCTOU) Race Condition	org.apache.tomcat:tomcat-catalina[9.0.0.M1,9.0.98)[10.1.0-M1,10.1.34)[11.0.0-M1,11.0.2)	Maven	18 Dec 2024
M Incorrect Authorization	org.elasticsearch:elasticsearch[8.16.0,8.16.2)	Maven	18 Dec 2024
M Information Exposure	org.geoserver.web:gs-web-core[2.0.0,2.25.1)	Maven	17 Dec 2024
M Cross-site Scripting (XSS)	org.webjars.bowergithub.basecamp:trix[0,]	Maven	17 Dec 2024
M Cross-site Scripting (XSS)	org.webjars.npm:trix[0,]	Maven	17 Dec 2024
M Improper Input Validation	org.webjars.npm:nanoid[,3.3.8)[4.0.0,5.0.9)	Maven	17 Dec 2024
H XML External Entity (XXE) Injection	org.fhir:ucum[,1.0.9)	Maven	15 Dec 2024
C XML External Entity (XXE) Injection	org.http4k:http4k-format-xml[,4.50.0.0)[5.0.0.0, 5.40.0.0)	Maven	13 Dec 2024
H Static Code Injection	org.xwiki.platform:xwiki-platform-help-ui[,16.6.0-rc-1)	Maven	13 Dec 2024
M Missing Authorization	org.xwiki.platform:xwiki-platform-scheduler-ui[4.2-rc-1,15.10.9)[16.0.0-rc-1, 16.4.0-rc-1)	Maven	13 Dec 2024
M Missing Authorization	org.xwiki.platform:xwiki-platform-administration-ui[4.2-rc-1,15.10.9)[16.0.0-rc-1, 16.4.0-rc-1)	Maven	13 Dec 2024
H Improper Encoding or Escaping of Output	org.xwiki.platform:xwiki-platform-web-templates[11.10.6,13.10.5)[14.0-rc-1,14.3-rc-1)	Maven	13 Dec 2024
C Incorrect Authorization	org.xwiki.platform:xwiki-platform-repository-server-ui[,15.10.9)[16.0.0-rc-1,16.3.0)	Maven	13 Dec 2024
H Prototype Pollution	org.webjars.npm:angular-expressions[0,]	Maven	12 Dec 2024
H HTTP Request Smuggling	io.quarkus.http:quarkus-http-core[,5.3.4)	Maven	12 Dec 2024
H XML External Entity (XXE) Injection	com.liferay:com.liferay.portal.tools.wsdd.builder[,1.0.14)	Maven	12 Dec 2024
H Use of Password Hash With Insufficient Computational Effort	com.liferay.portal:portal-impl[0,]	Maven	12 Dec 2024
M Cross-site Scripting (XSS)	com.liferay:com.liferay.portal.security.antisamy[,6.0.18)	Maven	12 Dec 2024
C Remote Code Execution (RCE)	org.apache.struts:struts2-core[,7.0.0)	Maven	12 Dec 2024
L Insufficient Verification of Data Authenticity	org.wildfly:wildfly-elytron-oidc-client-subsystem[0,]	Maven	11 Dec 2024
M Use of Cache Containing Sensitive Information	io.ktor:ktor-client-core-jvm[,2.3.13)[3.0.0-beta-1,3.0.0-rc-2)	Maven	9 Dec 2024
C Malicious Package	io.github.xz-java:xz-java[0,]	Maven	9 Dec 2024
L Improper Input Validation	dev.sigstore:sigstore-java[,1.2.0)	Maven	6 Dec 2024
H Uncontrolled Resource Consumption	org.kohsuke.stapler:json-lib[,2.4-jenkins-8)	Maven	5 Dec 2024
H Denial of Service (DoS)	io.github.davidepianca98:kmqtt-common[,1.0.0)	Maven	5 Dec 2024
H Deserialization of Untrusted Data	org.apache.hive:hive-standalone-metastore-server[4.0.0-alpha-1,4.0.0-alpha-2)	Maven	5 Dec 2024
H Deserialization of Untrusted Data	org.apache.hive:hive-exec[4.0.0-alpha-1,4.0.0-alpha-2)	Maven	5 Dec 2024
H Improper Authentication	org.apache.ozone:ozone-s3gateway[14.0,1.4.1)	Maven	3 Dec 2024
H Out-of-bounds Read	io.antmedia:ant-media-server[,2.9.0)	Maven	3 Dec 2024
H Improper Authentication	org.asynchttpclient:async-http-client[2.1.0,2.12.4)[3.0.0.Beta1,3.0.1)	Maven	3 Dec 2024

APPLICATION

OPERATING SYSTEM