Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Origin Validation ErrorCVE-2026-43870
Affects org.webjars.npm:thrift | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • H
Incorrect AuthorizationCVE-2026-23902
Affects org.apache.dolphinscheduler:dolphinscheduler-dao | Versions [,3.4.1)
Has fix
MavenPublished 6 May 2026
  • H
Incorrect AuthorizationCVE-2026-23902
Affects org.apache.dolphinscheduler:dolphinscheduler-api | Versions [,3.4.1)
Has fix
MavenPublished 6 May 2026
  • H
Access Control BypassCVE-2026-41166
Affects io.openremote:openremote-manager | Versions [,1.22.1)
Has fix
MavenPublished 6 May 2026
  • H
XML External Entity (XXE) InjectionCVE-2026-40882
Affects io.openremote:openremote-agent | Versions [,1.22.0)
Has fix
MavenPublished 6 May 2026
  • H
Arbitrary Code InjectionCVE-2026-39842
Affects io.openremote:openremote-manager | Versions [,1.22.0)
Has fix
MavenPublished 6 May 2026
  • H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-42334
Affects org.webjars.npm:mongoose | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • H
Directory TraversalCVE-2026-43975
Affects org.apache.wicket:wicket-core | Versions [8.0.0-M1,10.9.0)
Has fix
MavenPublished 6 May 2026
  • C
Use of Hard-coded CredentialsCVE-2026-5189
Affects org.sonatype.nexus:nexus-base | Versions [3.0.0,3.71.0-06)
Has fix
MavenPublished 6 May 2026
  • H
XML External Entity (XXE) InjectionCVE-2026-38429
Affects org.opencms:opencms-core | Versions [,21.0.0)
Has fix
MavenPublished 6 May 2026
  • H
Arbitrary File Write via Archive Extraction (Zip Slip)CVE-2026-40180
Affects io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment | Versions [,2.16.0)
Has fix
MavenPublished 6 May 2026
  • M
Prototype PollutionCVE-2026-5758
Affects org.webjars.npm:protocol-buffers-schema | Versions [,3.6.1)
Has fix
MavenPublished 6 May 2026
  • C
Arbitrary Code InjectionCVE-2026-41507
Affects org.webjars.npm:math-codegen | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • M
Directory TraversalCVE-2026-41691
Affects org.webjars.npm:i18next-http-backend | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • H
Arbitrary Code InjectionCVE-2026-40563
Affects org.apache.atlas:atlas-intg | Versions [0.8, 2.5.0)
Has fix
MavenPublished 6 May 2026
  • H
Arbitrary Code InjectionCVE-2026-40563
Affects org.apache.atlas:atlas-repository | Versions [0.8, 2.5.0)
Has fix
MavenPublished 6 May 2026
  • H
Improper Encoding or Escaping of OutputCVE-2026-42810
Affects org.apache.polaris:polaris-core | Versions [,1.4.1)
Has fix
MavenPublished 6 May 2026
  • H
Expression Language InjectionCVE-2026-42811
Affects org.apache.polaris:polaris-core | Versions [,1.4.1)
Has fix
MavenPublished 6 May 2026
  • M
HTTP Request SmugglingCVE-2026-41417
Affects io.netty:netty-codec-http | Versions [,4.1.133.Final)[4.2.0.Alpha1,4.2.13.Final)
Has fix
MavenPublished 6 May 2026
  • H
Missing AuthorizationCVE-2026-42809
Affects org.apache.polaris:polaris-runtime-service | Versions [,1.4.1)
Has fix
MavenPublished 6 May 2026
  • H
Incorrect AuthorizationCVE-2026-42812
Affects org.apache.polaris:polaris-runtime-service | Versions [,1.4.1)
Has fix
MavenPublished 6 May 2026
  • C
Arbitrary Code InjectionCVE-2026-24781
Affects org.webjars.npm:vm2 | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • C
Arbitrary Code InjectionCVE-2026-26332
Affects org.webjars.npm:vm2 | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • C
Arbitrary Code InjectionCVE-2026-26956
Affects org.webjars.npm:vm2 | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • C
Arbitrary Code InjectionCVE-2026-24118
Affects org.webjars.npm:vm2 | Versions [0,]
Has fix
MavenPublished 6 May 2026
  • M
Cross-site Scripting (XSS)CVE-2026-3438
Affects org.sonatype.nexus:nexus-repository | Versions [,3.91.0)
Has fix
MavenPublished 6 May 2026
  • C
Deserialization of Untrusted DataCVE-2026-3199
Affects org.sonatype.nexus:nexus-repository | Versions [3.22.1,3.91.0)
Has fix
MavenPublished 6 May 2026
  • M
Always-Incorrect Control Flow ImplementationCVE-2026-40942
Affects dev.dsf:dsf-common-pom | Versions [,2.1.0)
Has fix
MavenPublished 5 May 2026
  • M
Always-Incorrect Control Flow ImplementationCVE-2026-40942
Affects dev.dsf:dsf-common-jetty | Versions [,2.1.0)
Has fix
MavenPublished 5 May 2026
  • M
Always-Incorrect Control Flow ImplementationCVE-2026-40942
Affects dev.dsf:dsf-bpe-server | Versions [,2.1.0)
Has fix
MavenPublished 5 May 2026