Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2008-1728Mediumorg.igniterealtime.openfire:parent: Ignite Realtime Openfire allows remote authenticated users to cause a denial of serviceCVE-2008-1510Loworg.opencms:opencms-core: Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameterCVE-2008-1300Loworg.opencms:opencms-core: Alkacon Open CMS XSS via Logfile Viewer Settings functionCVE-2008-1301Mediumorg.opencms:opencms-core: Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameterCVE-2008-1285Mediumcom.sun.faces:jsf-api: Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)CVE-2008-1232Mediumorg.apache.tomcat:tomcat: Apache Tomcat Cross-site scripting (XSS) vulnerabilityCVE-2008-1045Loworg.opencms:opencms-core: Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jspCVE-2008-0002Mediumorg.apache.tomcat:tomcat: Apache Tomcat Sensitive Information DisclosureCVE-2007-6721Highbouncycastle:bcprov-jdk14: Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle VulnerabilityCVE-2007-6726Mediumorg.apache.struts:struts2-dojo-plugin: Apache Struts Dojo Plugin XSS VulnerabilityCVE-2007-6672Mediumorg.mortbay.jetty:jetty: Mortbay Jetty Double Slash URI Information Disclosure VulnerabilityCVE-2007-6382Mediumnet.sf.robocode:robocode.core: Robocode Arbitrary Code ExecutionCVE-2007-6286Mediumorg.apache.tomcat:tomcat: Apache Tomcat Does Not Properly Handle Empty RequestsCVE-2007-5615Mediumorg.mortbay.jetty:jetty: Mortbay Jetty CRLF Injection VulnerabilityCVE-2007-5614Highorg.mortbay.jetty:jetty: Improper Authentication in Mortbay JettyCVE-2007-5613Mediumorg.mortbay.jetty:jetty: Mortbay Jetty vulnerable to Cross-site scriptingCVE-2007-5461Loworg.apache.tomcat:tomcat: Apache Tomcat Path Traversal VulnerabilityCVE-2007-5342Mediumorg.apache.tomcat:tomcat-juli: JULI logging component in Apache Tomcat does not restrict certain permissions for web applicationsCVE-2007-5333Mediumorg.apache.tomcat:tomcat: Exposure of Sensitive Information in Apache TomcatCVE-2007-4724Mediumorg.apache.tomcat:tomcat: Apache Tomcat Example Application CSRF and XSS VulnerabilitiesCVE-2007-4556Mediumopensymphony:xwork: OpenSymphony XWork vulnerable to improper input validationCVE-2007-3384Mediumorg.apache.tomcat:tomcat: Apache Tomcat's CookieExample Vulnerable to XSSCVE-2007-3382Mediumorg.apache.tomcat:tomcat: Apache Tomcat treats single quotes as delimiters in cookiesCVE-2007-3385Mediumorg.apache.tomcat:tomcat: Apache Tomcat Mishandles Character Sequence in CookiesCVE-2007-3383Mediumorg.apache.tomcat:tomcat: Apache Tomcat SendMailServlet XSS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo