Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

45 records

Priority LOW 32

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.01769 Published 2020-05-14 Partial fix · 1.9.15, 1.10.8 CWE-668
TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

Priority LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79
TI-2019-09249 CVE-2019-12402 · GHSA-53x6-4x5p-rrvv

Infinite loop in Apache Commons Compress

Priority MEDIUM 49

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16157 Published 2019-08-29 Partial fix · 1.19 CWE-835
Load more