Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on…EPSS 0.6%May 28, 2026
- High8.8Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- Critical9.8Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06.EPSS 1.3%May 19, 2026
- Medium6.5Improper Authorization vulnerability in Apache OFBiz Webtools.EPSS 0.6%May 19, 2026
- Critical9.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz.EPSS 0.6%May 19, 2026
- Critical9.1Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium5.3Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.EPSS 0.5%May 19, 2026
- Medium5.3Improper Authentication vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), I…EPSS 0.7%May 19, 2026
- Medium6.5Improper Input Validation vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.EPSS 0.6%May 19, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.EPSS 0.8%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityKEVEPSS 6.6%Apr 9, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.EPSS 1.3%Jan 7, 2026
- High8.2Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.EPSS 0.6%Dec 10, 2025
89 records · page 1 of 4
PreviousNext