Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2014-3666Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows for Code Execution via Crafted Packet to the CLI CVE-2014-3667Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code CVE-2015-1810Mediumorg.jenkins-ci.main:jenkins-core: Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation CVE-2015-1806Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows for Privilege Escalation by Remote Authenticated Users CVE-2014-3680Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2015-1813Loworg.jenkins-ci.main:jenkins-core: Jenkins allows Cross-Site Scripting (XSS)CVE-2015-1812Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Cross-site Scripting vulnerability CVE-2015-1808Loworg.jenkins-ci.main:jenkins-core: Jenkins Vulnerable to Denial of Service (DoS)CVE-2015-1814Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows for Privilege Escalation by Remote Authenticated Users CVE-2016-3670Mediumcom.liferay:com.liferay.portal.search.web: Liferay Portal Vulnerable to XSS in Profile Search Functionality CVE-2014-3678Mediumorg.jvnet.hudson.plugins:monitoring: Jenkins Monitoring Plugin allows Cross-Site Scripting (XSS)CVE-2013-6374Lowcom.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer: Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)CVE-2014-3679Mediumorg.jvnet.hudson.plugins:monitoring: Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages CVE-2013-2034Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Cross-Site Request Forgery vulnerabilities CVE-2013-6373Mediumorg.jenkins-ci.plugins:exclusion: Jenkins Exclusion Plugin allows Access to Resource Locks CVE-2016-6345Mediumorg.jboss.resteasy:resteasy-client: Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy CVE-2016-6801Highorg.apache.jackrabbit:jackrabbit-webdav: Apache Jackrabbit Authentication Hijacking Vulnerability CVE-2013-2185Highorg.apache.tomcat:tomcat: Deserialization of Untrusted Data in Apache Tomcat CVE-2012-6092Mediumorg.apache.activemq:activemq-core: Cross-site Scripting in Apache ActiveMQ CVE-2012-6551Mediumorg.apache.activemq:apache-activemq: Apache ActiveMQ default configuration subject to denial of service CVE-2013-1880Mediumorg.apache.activemq:activemq-core: Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet CVE-2013-3060Mediumorg.apache.activemq:activemq-client: Improper Authentication in Apache ActiveMQ CVE-2014-5325Mediumorg.directwebremoting:dwr: Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting CVE-2015-1776Mediumorg.apache.hadoop:hadoop-common: Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop CVE-2016-2162Mediumorg.apache.struts:struts2-core: Apache Struts XSS Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo