Browse CVEs by Ecosystem and Severity

Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control

Apache CXF has Improper Restriction of XML External Entity Reference

netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access

Spring Web Services: Jaxp13 XPath XXE via StreamSource and SAXSource

Spring Web Services: Wss4jSecurityInterceptor disables WS-I BSP validation by default

Spring for GraphQL: Cross-Site WebSocket Hijacking

Spring for GraphQL: Unsafe Deserialization

Spring Web Services: SSRF via unvalidated WS-Addressing reply destinations

Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation

Spring for Apache Pulsar: JsonPulsarHeaderMapper Trusted-Package Prefix Check Allows Unintended Subpackage Deserialization

Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests

In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters

Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)

Spring Framework Unsafe Deserialization via Jackson JMS Converters

Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

Micrometer HTTP server instrumentations DoS

Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path

Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass

Apache ActiveMQ has an Incorrect Default Permissions vulnerability

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

CC-Tweaked has an SSRF Protection Bypass with NAT64

Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection

Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override

Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem

Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`

XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

XWiki Platform has path traversal via resources parameter in ssx and jsx endpoints when using leading slash

Apache CXF has an LDAP injection vulnerability

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

GlassFish's gadget handler is vulnerable to RCE

GlassFish's Administration Console is Vulnerable to RCE

Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

Apache Flink: Remote code execution via SQL injection in code generation

Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy

Mapfish Print: Remote Code Injection (RCE) in Dynamic table

Security feature bypass vulnerability in Azure Key Vault Keys library for Java

Apache Tomcat - Security constraints not correctly applied

Apache Tomcat: LockOutRealm treats user names as case-sensitive

Apache Tomcat - WebSocket authentication header exposure

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Apache Tomcat - Digest authenticator will authenticate any unknown user

Apache Tomcat - HTTP/2 request headers not validated

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)