Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-2966Highcom.caucho:resin: Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters CVE-2012-2965Highcom.caucho:resin: Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables CVE-2012-1618Highorg.postgresql:postgresql: Unescaped parameters in the PostgreSQL JDBC driver CVE-2012-1154Mediumorg.jboss.mod_cluster:mod_cluster: Improper Access Control in JBoss mod_cluster CVE-2012-1826Highcom.dotcms:dotcms: dotCMS allows remote authenticated users to execute arbitrary Java code CVE-2011-2732Mediumorg.springframework.security:spring-security-core: Improper Control of Generation of Code in Spring Security CVE-2012-5055Mediumorg.springframework.security:spring-security-core: Exposure of Sensitive Information to an Unauthorized Actor in Spring Security CVE-2012-3428Mediumorg.jboss.ironjacamar:ironjacamar-jdbc: User confusion in IronJacamar CVE-2012-4418Mediumorg.apache.axis2:axis2: Apache Axis2 Vulnerable to XML Signature wrapping attack CVE-2011-4314Mediumorg.openid4java:openid4java: OpenID4Java does not verify that Attribute Exchange (AX) information is signed CVE-2012-4446Mediumorg.apache.qpid:qpid-client: Improper Authentication in Apache Qpid CVE-2013-1814Mediumorg.apache.rave:rave-core: Apache Rave information disclosure vulnerability CVE-2013-3300Mediumnet.liftweb:lift-webkit: Lift Sensitive Information Disclosure CVE-2013-4600Loworg.opencms:opencms-core: Alkacon OpenCMS XSS via title and requestedResource parameters CVE-2013-4766Mediumorg.jclouds.api:eucalyptus: Eucalyptus Unauthorized Access to CC/NC Log Files CVE-2013-4378Mediumnet.bull.javamelody:javamelody-core: Improper Neutralization of Input During Web Page Generation in JavaMelody CVE-2011-1411Mediumorg.opensaml:opensaml: Improper Authentication in OpenSAML CVE-2011-2731Mediumorg.springframework.security:spring-security-core: Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security CVE-2013-4295Mediumorg.apache.shindig:shindig-php: Apache Shindig PHP Sensitive Information Disclosure CVE-2013-4390Mediumorg.apache.sling:org.apache.sling.auth.core: Apache Sling Auth Core bundle vulnerable to Open Redirection CVE-2011-5036Mediumrack: Rack Gem Subject to Denial of Service via Hash Collisions CVE-2013-6348Mediumorg.apache.struts:struts2-core: Apache Struts is vulnerable to Cross-site Scripting CVE-2013-5676Mediumorg.jenkins-ci.plugins:sonar: Jenkins SonarQube Plugin Stores Passwords in Cleartext CVE-2014-1202Highcom.smartbear.soapui:soapui: Code injection via property expansion in SoapUI CVE-2013-4112Mediumorg.jgroups:jgroups: Exposure of Sensitive Information to an Unauthorized Actor in JGroup

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.