Browse CVEs by Ecosystem and Severity

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access

XWiki's REST APIs can list all pages/spaces, leading to unavailability

Apache Tomcat - Client certificate verification bypass

XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

Apache Log4j does not verify the TLS hostname in its Socket Appender

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication

Mammoth is vulnerable to Directory Traversal

Apache CXF: Untrusted JMS configuration can lead to RCE

Apache Tomcat installer for Windows has an untrusted search path vulnerability

XWiki does not require right warnings for notification displayer objects

JRuby-OpenSSL has hostname verification disabled by default

Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

Apache Tomcat Denial of Service via invalid HTTP priority header

MPXJ has a Potential Path Traversal Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

pubnub Insufficient Entropy vulnerability

HTTP/2 Stream Cancellation Attack

Microsoft Common Data Model SDK Denial of Service Vulnerability

protobuf-java has a potential Denial of Service issue

jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label

RubyGems Cross-site Scripting vulnerability

Bootstrap vulnerable to Cross-Site Scripting (XSS)

Improper Input Validation and Injection in Apache Log4j2

XSS in `*Text` options of the Datepicker widget in jquery-ui

XSS in the `of` option of the `.position()` util in jquery-ui

XSS in the `altField` option of the Datepicker widget in jquery-ui

Potential XSS vulnerability in jQuery

Potential XSS vulnerability in jQuery

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

Bootstrap Vulnerable to Cross-Site Scripting

bootstrap Cross-site Scripting vulnerability

XSS vulnerability that affects bootstrap

Bootstrap Cross-site Scripting vulnerability

Bootstrap Cross-site Scripting vulnerability

Bootstrap Cross-site Scripting vulnerability

jQuery-UI vulnerable to Cross-site Scripting in dialog closeText