Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| ghsa-8wv5-x4w7-5gww | Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop | UNKNOWN | 8.7 | ghsa | unknown |
| ghsa-qq5r-98hh-rxc9 | Apache Tomcat - Security constraint bypass with HTTP/0.9 | UNKNOWN | 2.7 | ghsa | unknown |
| ghsa-h6fc-48rj-7qqh | Apache Tomcat - Digest authenticator will authenticate any unknown user | UNKNOWN | 9.8 | ghsa | unknown |
| ghsa-9xv2-5v5q-p794 | Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability | UNKNOWN | 9.8 | ghsa | unknown |
| ghsa-x4m4-345f-5h5g | Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-rv64-5gf8-9qq8 | Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-h3x4-894j-xpx5 | Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability | UNKNOWN | 9.1 | ghsa | unknown |
| ghsa-gx5v-xp9w-j4cg | Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-fpj8-gq4v-p354 | Apache Tomcat - Client certificate verification bypass | UNKNOWN | 6.3 | ghsa | unknown |
| ghsa-9m89-8frq-c98c | Apache Tomcat - AJP secret compared in non-constant time | UNKNOWN | 3.7 | ghsa | unknown |
| ghsa-9m3c-qcxr-9x87 | Apache Tomcat has an Open Redirect vulnerability | UNKNOWN | 6.9 | ghsa | unknown |
| ghsa-5mp6-jrq3-r938 | Apache Tomcat: LockOutRealm treats user names as case-sensitive | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-5m62-pw8w-7w9f | Apache Tomcat - Security constraints not correctly applied | UNKNOWN | 9.1 | ghsa | unknown |
| ghsa-563x-q5rq-57qp | Apache Tomcat has an HTTP Request/Response Smuggling vulnerability | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-gcx9-497g-6cp6 | Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability | UNKNOWN | 9.1 | ghsa | unknown |
| ghsa-xvr9-35cr-46v9 | org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context | UNKNOWN | 5.9 | ghsa | unknown |
| ghsa-p68j-q7hf-3qcp | Spinnaker: Improper yaml processing on kustomize bake operations | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-m452-q8c9-rg2f | AsyncHttpClient stores cookie for an unrelated domain (cookie tossing) via ThreadSafeCookieStore | UNKNOWN | 4.0 | ghsa | unknown |
| ghsa-h84g-69h7-mw6v | mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets" | UNKNOWN | 7.1 | ghsa | unknown |
| ghsa-93j5-89vc-pph4 | RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS | UNKNOWN | 8.7 | ghsa | unknown |
| ghsa-8c42-7qj2-3j46 | Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite | UNKNOWN | 6.5 | ghsa | unknown |
| ghsa-6qm2-mcq7-53qp | Duplicate Advisory: jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition | UNKNOWN | 6.9 | ghsa | unknown |
| ghsa-6g32-pxv4-2wfj | RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-68mj-5wr7-6fgg | RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation | UNKNOWN | 8.7 | ghsa | unknown |
| ghsa-5xwg-cfvj-gff5 | RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max | UNKNOWN | ghsa | unknown | |
| ghsa-5m9f-rphj-c435 | RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM | UNKNOWN | 5.1 | ghsa | unknown |
| ghsa-xx22-p4ch-683r | LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges | UNKNOWN | 6.5 | ghsa | unknown |
| ghsa-wh89-7897-x99h | Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address | UNKNOWN | 5.5 | ghsa | unknown |
| ghsa-wc96-39fc-566f | Netty: TOCTOU in OcspServerCertificateValidator | UNKNOWN | 7.4 | ghsa | unknown |
| ghsa-w7x5-g22v-xqhr | Eclipse Jetty: Path parameter traversal | UNKNOWN | 5.3 | ghsa | unknown |