Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.EPSS 2.3%Sep 2, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityKEVEPSS 99.9%Mar 10, 2025
- High7.5Apache OFBiz Forced Browsing VulnerabilityKEVEPSS 100.0%Sep 4, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityKEVEPSS 99.4%Aug 5, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityKEVEPSS 100.0%Jul 1, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityKEVEPSS 99.9%May 8, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityKEVEPSS 99.2%Apr 22, 2024
- Medium5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such tha…Dec 18, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.9%Oct 27, 2023
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityKEVEPSS 100.0%Oct 10, 2023
- Critical9.8Apache RocketMQ Command Execution VulnerabilityKEVEPSS 96.6%May 24, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityKEVEPSS 97.4%Apr 24, 2023
- High8.8Apache Spark Command Injection VulnerabilityKEVEPSS 93.2%Jul 18, 2022
- Critical9.8Apache CouchDB Insecure Default Initialization of Resource VulnerabilityKEVEPSS 92.5%Apr 26, 2022
- Critical9.8Apache APISIX Authentication Bypass VulnerabilityKEVEPSS 96.1%Feb 11, 2022
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Dec 14, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityKEVEPSS 100.0%Dec 10, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityKEVEPSS 100.0%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityKEVEPSS 100.0%Oct 5, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)KEVEPSS 100.0%Sep 16, 2021
- High7.8System Information Library for Node.JS Command InjectionKEVEPSS 90.7%Feb 16, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.EPSS 12.0%Jan 26, 2021
- High7.5Apache Flink Improper Access Control VulnerabilityKEVEPSS 97.8%Jan 5, 2021
- Critical9.8Apache Struts Remote Code Execution VulnerabilityKEVEPSS 95.9%Dec 10, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassKEVEPSS 99.8%Nov 10, 2020