Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Improper Validation of Certificate with Host MismatchCVE-2025-68161
Affects org.apache.logging.log4j:log4j-core | Versions [,2.25.3)
Has fix
MavenPublished 19 Dec 2025
  • M
Use of a Broken or Risky Cryptographic AlgorithmCVE-2025-14763
Affects software.amazon.encryption.s3:amazon-s3-encryption-client-java | Versions [,3.6.0)
Has fix
MavenPublished 18 Dec 2025
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2024-29371
Affects org.bitbucket.b_c:jose4j | Versions [,0.9.6)
Has fix
MavenPublished 18 Dec 2025
  • M
Improper Verification of Cryptographic SignatureCVE-2025-68113
Affects org.altcha:altcha | Versions [,1.3.0)
Has fix
MavenPublished 17 Dec 2025
  • M
Arbitrary Code InjectionCVE-2025-14674
Affects com.aizuda:snail-job-common-core | Versions [,1.7.0-beta1)
Has fix
MavenPublished 17 Dec 2025
  • H
Authentication Bypass by Alternate NameCVE-2025-14777
Affects org.keycloak:keycloak-services | Versions [0,]
Has fix
MavenPublished 16 Dec 2025
  • M
Cross-site Scripting (XSS)CVE-2023-53880
Affects org.lucee:core | Versions [0,]
Has fix
MavenPublished 16 Dec 2025
  • M
CRLF InjectionCVE-2025-67735
Affects io.netty:netty-codec-http | Versions [,4.1.129.Final)[4.2.0.Alpha1,4.2.8.Final)
Has fix
MavenPublished 16 Dec 2025
  • H
Improper Certificate ValidationCVE-2025-37731
Affects org.elasticsearch.plugin:x-pack-core | Versions [7.8.1,8.19.8)[9.0.0-beta1,9.1.8)[9.2.0,9.2.2)
Has fix
MavenPublished 16 Dec 2025
  • H
Improper Certificate ValidationCVE-2025-37731
Affects org.elasticsearch.plugin:x-pack-security | Versions [7.8.1,8.19.8)[9.0.0-beta1,9.1.8)[9.2.0,9.2.2)
Has fix
MavenPublished 16 Dec 2025
  • H
Improper Certificate ValidationCVE-2025-37731
Affects org.elasticsearch:elasticsearch-ssl-config | Versions [7.8.1,8.19.8)[9.0.0-beta1,9.1.8)[9.2.0,9.2.2)
Has fix
MavenPublished 16 Dec 2025
  • M
Directory TraversalCVE-2025-67898
Affects org.webjars.npm:mjml-core | Versions [0,]
Has fix
MavenPublished 15 Dec 2025
  • H
Insertion of Sensitive Information Into Sent DataCVE-2025-67721
Affects io.airlift:aircompressor-v3 | Versions [,3.4)
Has fix
MavenPublished 14 Dec 2025
  • H
Insertion of Sensitive Information Into Sent DataCVE-2025-67721
Affects io.airlift:aircompressor | Versions [0,)
Has fix
MavenPublished 14 Dec 2025
  • M
Cross-site Scripting (XSS)CVE-2025-8082
Affects org.webjars.npm:vuetify | Versions [2.0.0,3.0.0)
Has fix
MavenPublished 14 Dec 2025
  • H
Incorrect AuthorizationCVE-2025-3586
Affects com.liferay:com.liferay.object.scripting.impl | Versions [,1.0.3)
Has fix
MavenPublished 14 Dec 2025
  • H
Incorrect AuthorizationCVE-2025-3586
Affects com.liferay:com.liferay.object.scripting.api | Versions [,2.0.0)
Has fix
MavenPublished 14 Dec 2025
  • H
Incorrect AuthorizationCVE-2025-3586
Affects com.liferay:com.liferay.object.service | Versions [,1.0.96)
Has fix
MavenPublished 14 Dec 2025
  • H
Prototype PollutionCVE-2025-8083
Affects org.webjars.npm:vuetify | Versions [2.2.1,3.0.0)
Has fix
MavenPublished 14 Dec 2025
  • M
Directory TraversalCVE-2025-67643
Affects org.jenkinsci.plugins:pipeline-reporter-by-redpen | Versions [0,]
Has fix
MavenPublished 12 Dec 2025
  • H
Cross-site Scripting (XSS)CVE-2025-67641
Affects io.jenkins.plugins:coverage | Versions [,2.3056.v1dfe888b_0249)
Has fix
MavenPublished 12 Dec 2025
  • M
Improper Ownership ManagementCVE-2025-67642
Affects com.datapipe.jenkins.plugins:hashicorp-vault-plugin | Versions [0,]
Has fix
MavenPublished 12 Dec 2025
  • M
Command InjectionCVE-2025-67640
Affects org.jenkins-ci.plugins:git-client | Versions [,6.4.1)
Has fix
MavenPublished 12 Dec 2025
  • H
Improper Resource Shutdown or ReleaseCVE-2025-67635
Affects org.jenkins-ci.main:jenkins-core | Versions [,2.528.3)[2.529,2.541)
Has fix
MavenPublished 12 Dec 2025
  • H
Improper Resource Shutdown or ReleaseCVE-2025-67635
Affects org.jenkins-ci.main:cli | Versions [,2.528.3)[2.529,2.541)
Has fix
MavenPublished 12 Dec 2025
  • M
Missing AuthorizationCVE-2025-67636
Affects org.jenkins-ci.main:jenkins-core | Versions [,2.528.3)[2.529,2.541)
Has fix
MavenPublished 12 Dec 2025
  • M
Cleartext Storage of Sensitive InformationCVE-2025-67637
Affects org.jenkins-ci.main:jenkins-core | Versions [,2.528.3)[2.529,2.541)
Has fix
MavenPublished 12 Dec 2025
  • M
Insufficiently Protected CredentialsCVE-2025-67638
Affects org.jenkins-ci.main:jenkins-core | Versions [,2.528.3)[2.529,2.541)
Has fix
MavenPublished 12 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-67639
Affects org.jenkins-ci.main:jenkins-core | Versions [,2.528.3)[2.529,2.541)
Has fix
MavenPublished 12 Dec 2025
  • H
Deserialization of Untrusted DataCVE-2025-26866
Affects org.apache.hugegraph:hg-pd-core | Versions [,1.7.0)
Has fix
MavenPublished 12 Dec 2025