Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • C
Missing Authentication for Critical Function
org.springframework.security:spring-security-core[6.4.0,6.4.6)Maven20 May 2025
  • H
Uncaught Exception
org.webjars.npm:multer[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars:bootstrap-multiselect[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars.bower:bootstrap-multiselect[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars.npm:bootstrap-multiselect[0,]Maven20 May 2025
  • M
Cross-site Scripting (XSS)
org.webjars.bowergithub.davidstutz:bootstrap-multiselect[0,]Maven20 May 2025
  • H
Missing Release of Memory after Effective Lifetime
org.webjars.npm:multer[0,]Maven20 May 2025
  • H
Improper Verification of Cryptographic Signature
org.webjars.npm:openpgp[0,]Maven20 May 2025
  • H
Improper Authentication
org.jenkins-ci.plugins:wso2id-oauth[0,]Maven19 May 2025
  • M
Prototype Pollution
org.webjars.npm:estree-util-value-to-estree[,3.3.3)Maven19 May 2025
  • H
Cross-site Scripting (XSS)
org.jenkins-ci.plugins:cloudbees-jenkins-advisor[,374.376.v3a_41a_a_142efe)Maven18 May 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.calendar.web[,4.0.0)Maven18 May 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.portal.workflow.kaleo.forms.web[,5.0.0)Maven18 May 2025
  • H
SQL Injection
com.liferay.commerce:com.liferay.commerce.address.web[,3.0.8)Maven18 May 2025
  • H
SQL Injection
com.liferay.commerce:com.liferay.commerce.product.service[,5.0.19)Maven18 May 2025
  • H
Access Control Bypass
com.liferay:com.liferay.multi.factor.authentication.web[,2.0.0)Maven18 May 2025
  • H
Access Control Bypass
com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web[,2.0.0)Maven18 May 2025
  • M
Insertion of Sensitive Information into Log File
org.apache.iotdb:node-commons[0.10.0,1.3.4)[2.0.1-beta,2.0.2)Maven16 May 2025
  • M
Insertion of Sensitive Information into Log File
org.apache.iotdb:iotdb-server[0.10.0,1.3.4)[2.0.1-beta,2.0.2)Maven16 May 2025
  • M
Insertion of Sensitive Information into Log File
org.apache.iotdb:iotdb-jdbc[0.10.0,1.3.4)[2.0.1-beta,2.0.2)Maven16 May 2025
  • H
Arbitrary Code Injection
org.apache.iotdb:node-commons[1.0.0,1.3.4)Maven16 May 2025
  • H
Arbitrary Code Injection
org.apache.iotdb:iotdb-server[1.0.0,1.3.4)Maven16 May 2025
  • L
Improper Handling of Case Sensitivity
org.springframework:spring-context[6.1.0,6.1.20)[6.2.0,6.2.7)Maven16 May 2025
  • L
Cross-site Scripting (XSS)
org.webjars.bower:bootstrap[3.4.1,4.0.0)Maven16 May 2025
  • L
Cross-site Scripting (XSS)
org.webjars.bowergithub.twbs:bootstrap[3.4.1,4.0.0)Maven16 May 2025
  • L
Cross-site Scripting (XSS)
org.webjars:bootstrap[3.4.1,4.0.0)Maven16 May 2025
  • L
Cross-site Scripting (XSS)
org.webjars.npm:bootstrap[3.4.1,4.0.0)Maven16 May 2025
  • L
Missing Release of Memory after Effective Lifetime
org.webjars.npm:undici[,5.29.0)Maven16 May 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.site.my.sites.web[,5.0.23)Maven15 May 2025
  • C
Access Control Bypass
com.baidu.mapp:brcc-core[0,]Maven14 May 2025