Search Vulnerabilities

Neo4j Enterprise and Community vulnerable to a potential information disclosure

Apache Syncope: Console XXE on Keymaster parameters

Apache Syncope: Reflected XSS on Enduser Login

JinJava Bypass through ForTag leads to Arbitrary Java Execution

Crafter CMS has Improper Control of Dynamically-Managed Code Resources

H2O has an External Control of File Name or Path vulnerability

Keycloak Server-Side Request Forgery (SSRF) vulnerability

Keycloak Admin API allows an administrator with limited privileges to retrieve sensitive custom attributes

Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter Names

Quick-Media Batik Codec FIX Package has Buffer Overflow Vulnerability in PNG Codec

weixin4j has Improperly Controlled Sequential Memory Allocation

Quick-Media Batik Codec FIX package has Code Injection vulnerability

jsonrpc4j has Infinite Loop in RPC Stream Writer

AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods

Hibernate Reactive Vulnerable to DoS via Connection Pool Exhaustion

Apache Continuum vulnerable to Command Injection through Installations REST API

Apache Karaf Decanter has Deserialization of Untrusted Data in its Log Socket Collector

Apache Hadoop HDFS Native Client has Out-of-bounds Write Vulnerability

XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages