Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M Cross-site Scripting (XSS)	org.webjars:layui [,2.9.18)	Maven	9 Oct 2024
M Cross-site Scripting (XSS)	org.webjars.npm:layui [,2.9.18)	Maven	9 Oct 2024
M Cross-site Scripting (XSS)	org.webjars.npm:rollup [,4.24.0)	Maven	9 Oct 2024
M Information Exposure	org.webjars.npm:vite [,5.4.9)	Maven	9 Oct 2024
L Cross-site Scripting (XSS)	org.webjars.npm:vite [,5.4.9)	Maven	9 Oct 2024
H Prototype Pollution	org.webjars.bower:dompurify [0,]	Maven	9 Oct 2024
H Prototype Pollution	org.webjars.bowergithub.cure53:dompurify [0,]	Maven	9 Oct 2024
H Prototype Pollution	org.webjars.npm:dompurify [,2.5.6) [3.0.0,3.1.4)	Maven	9 Oct 2024
M Insertion of Sensitive Information into Log File	io.quarkiverse.cxf:quarkus-cxf [,3.15.2)	Maven	9 Oct 2024
M HTTP Request Smuggling	org.jboss.resteasy:resteasy-netty4 [0,]	Maven	9 Oct 2024
C Improper Control of Generation of Code ('Code Injection')	com.ruoyi:ruoyi-generator [0,]	Maven	8 Oct 2024
H Uncontrolled Resource Consumption	org.kordamp.json:json-lib-core [,3.1.0)	Maven	4 Oct 2024
M Uncontrolled Resource Consumption	commons-io:commons-io [2.0,2.14.0)	Maven	3 Oct 2024
C Deserialization of Untrusted Data	org.apache.avro:avro [,1.11.4)	Maven	3 Oct 2024
M Allocation of Resources Without Limits or Throttling	com.liferay.portal:util-taglib [,8.4.6)	Maven	3 Oct 2024
M Allocation of Resources Without Limits or Throttling	com.liferay:com.liferay.image.uploader.web [,5.0.18)	Maven	3 Oct 2024
C Improper Authentication	org.jenkins-ci.plugins:oic-auth [,4.355.v3a_fb_fca_b_96d4)	Maven	3 Oct 2024
C Improper Authentication	org.jenkins-ci.plugins:oic-auth [,4.355.v3a_fb_fca_b_96d4)	Maven	3 Oct 2024
M Exposure of Sensitive Information to an Unauthorized Actor	org.jenkins-ci.plugins:credentials [,1371.1373.v4eb_fa_b_7161e9) (1371.1373.v4eb_fa_b_7161e9,1381.v2c3a_12074da_b_)	Maven	3 Oct 2024
M Incorrect Authorization	org.jenkins-ci.main:jenkins-core [,2.462.3) [2.466,2.479)	Maven	3 Oct 2024
M Information Exposure Through an Error Message	org.jenkins-ci.main:jenkins-core [,2.462.3) [2.466,2.479)	Maven	3 Oct 2024
M Open Redirect	org.glassfish.main.admin:rest-service [,7.0.17)	Maven	30 Sep 2024
L Deserialization of Untrusted Data	org.apache.lucene:lucene-replicator [4.4.0, 9.12.0)	Maven	30 Sep 2024
M Missing Authorization	org.eclipse.edc:control-plane-catalog [0.1.3,0.9.1)	Maven	27 Sep 2024
M Cleartext Storage of Sensitive Information	org.ovirt.engine.sdk:ovirt-engine-sdk-java [0,]	Maven	27 Sep 2024
H Insecure Storage of Sensitive Information	org.apache.maven.plugins:maven-archetype-plugin [3.2.1,3.3.0)	Maven	26 Sep 2024
M Creation of Temporary File in Directory with Insecure Permissions	org.apache.hadoop:hadoop-common [,3.4.0)	Maven	25 Sep 2024
H Inadequate Encryption Strength	org.apache.linkis:linkis-engineplugin-spark [1.3.0,1.6.0)	Maven	25 Sep 2024
M Arbitrary File Read	org.jenkins-ci.main:remoting [,3206.3208.v409508a_675ff) [3248.v65ecb_254c298,3248.3250.v3277a_8e88c9b_) [3256.v4da_9d93e1a_f3,3256.3258.v858f3c9a_f69d)	Maven	24 Sep 2024
H Allocation of Resources Without Limits or Throttling	org.apache.tomcat.embed:tomcat-embed-core [9.0.13,9.0.90) [10.1.0-M1,10.1.25) [11.0.0-M1,11.0.0-M21)	Maven	24 Sep 2024

APPLICATION

OPERATING SYSTEM