Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-2830 |
|
Vulnerability in java (CVE-2020-2830)
vulnerability in java (CVE-2020-2830). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2803 |
|
Vulnerability in java (CVE-2020-2803)
vulnerability in java (CVE-2020-2803). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2800 |
|
Vulnerability in java (CVE-2020-2800)
vulnerability in java (CVE-2020-2800). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2781 |
|
Vulnerability in java (CVE-2020-2781)
vulnerability in java (CVE-2020-2781). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2778 |
|
Vulnerability in java (CVE-2020-2778)
vulnerability in java (CVE-2020-2778). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.7, 14.0.1` or later.
|
| CVE-2020-2773 |
|
Vulnerability in java (CVE-2020-2773)
vulnerability in java (CVE-2020-2773). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2767 |
|
Vulnerability in java (CVE-2020-2767)
vulnerability in java (CVE-2020-2767). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.7, 14.0.1` or later.
|
| CVE-2020-2757 |
|
Vulnerability in java (CVE-2020-2757)
vulnerability in java (CVE-2020-2757). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2756 |
|
Vulnerability in java (CVE-2020-2756)
vulnerability in java (CVE-2020-2756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.261, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2755 |
|
Vulnerability in java (CVE-2020-2755)
vulnerability in java (CVE-2020-2755). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2754 |
|
Vulnerability in java (CVE-2020-2754)
vulnerability in java (CVE-2020-2754). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.251, 11.0.7, 14.0.1` or later.
|
| CVE-2020-2659 |
|
Vulnerability in java (CVE-2020-2659)
vulnerability in java (CVE-2020-2659). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.251, 8.0.241` or later.
|
| CVE-2020-2655 |
|
Vulnerability in java (CVE-2020-2655)
vulnerability in java (CVE-2020-2655). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-2604 |
|
Vulnerability in java (CVE-2020-2604)
vulnerability in java (CVE-2020-2604). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.251, 8.0.241, 11.0.6, 13.0.2` or later.
|
| CVE-2020-2601 |
|
Vulnerability in java (CVE-2020-2601)
vulnerability in java (CVE-2020-2601). Confidential information can be exposed externally. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.251, 8.0.241, 11.0.6, 13.0.2` or later.
|
| CVE-2020-2593 |
|
Vulnerability in java (CVE-2020-2593)
vulnerability in java (CVE-2020-2593). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.251, 8.0.241, 11.0.6, 13.0.2` or later.
|
| CVE-2020-2585 |
|
Vulnerability in java (CVE-2020-2585)
vulnerability in java (CVE-2020-2585). Data can be tampered with by attackers. Mitigation: upgrade to `1.8.0, 8.0.241` or later.
|
| CVE-2020-2583 |
|
Vulnerability in java (CVE-2020-2583)
vulnerability in java (CVE-2020-2583). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.251, 8.0.241, 11.0.6, 13.0.2` or later.
|
| CVE-2020-14803 |
|
Vulnerability in java (CVE-2020-14803)
vulnerability in java (CVE-2020-14803). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.9, 15.0.1` or later.
|
| CVE-2020-14797 |
|
Vulnerability in java (CVE-2020-14797)
vulnerability in java (CVE-2020-14797). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.281, 8.0.271, 11.0.9, 15.0.1` or later.
|
| CVE-2020-14782 |
|
Vulnerability in java (CVE-2020-14782)
vulnerability in java (CVE-2020-14782). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.281, 8.0.271, 11.0.9, 15.0.1` or later.
|
| CVE-2020-14781 |
|
Vulnerability in java (CVE-2020-14781)
vulnerability in java (CVE-2020-14781). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.281, 8.0.271, 11.0.9, 15.0.1` or later.
|
| CVE-2020-14779 |
|
Vulnerability in java (CVE-2020-14779)
vulnerability in java (CVE-2020-14779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.281, 8.0.271, 11.0.9, 15.0.1` or later.
|
| CVE-2020-14664 |
|
Vulnerability in java (CVE-2020-14664)
vulnerability in java (CVE-2020-14664). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.8.0, 8.0.261` or later.
|
| CVE-2020-14621 |
|
Vulnerability in java (CVE-2020-14621)
vulnerability in java (CVE-2020-14621). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.271, 8.0.261, 11.0.8, 14.0.2` or later.
|
| CVE-2020-14593 |
|
Vulnerability in java (CVE-2020-14593)
vulnerability in java (CVE-2020-14593). Data can be tampered with by attackers. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.271, 8.0.261, 11.0.8, 14.0.2` or later.
|
| CVE-2020-14583 |
|
Vulnerability in java (CVE-2020-14583)
vulnerability in java (CVE-2020-14583). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.271, 8.0.261, 11.0.8, 14.0.2` or later.
|
| CVE-2020-14581 |
|
Vulnerability in java (CVE-2020-14581)
vulnerability in java (CVE-2020-14581). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.261, 11.0.8, 14.0.2` or later.
|
| CVE-2020-14579 |
|
Vulnerability in java (CVE-2020-14579)
vulnerability in java (CVE-2020-14579). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.271, 8.0.261` or later.
|
| CVE-2020-14578 |
|
Vulnerability in java (CVE-2020-14578)
vulnerability in java (CVE-2020-14578). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.271, 8.0.261` or later.
|
| CVE-2020-14577 |
|
Vulnerability in java (CVE-2020-14577)
vulnerability in java (CVE-2020-14577). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.271, 8.0.261, 11.0.8, 14.0.2` or later.
|
| CVE-2020-14573 |
|
Vulnerability in java (CVE-2020-14573)
vulnerability in java (CVE-2020-14573). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.8, 14.0.2` or later.
|
| CVE-2020-14562 |
|
Vulnerability in java (CVE-2020-14562)
vulnerability in java (CVE-2020-14562). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.8, 14.0.2` or later.
|
| CVE-2020-14556 |
|
Vulnerability in java (CVE-2020-14556)
vulnerability in java (CVE-2020-14556). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.261, 11.0.8, 14.0.2` or later.
|
| CVE-2026-39852 |
|
Authorization Flaw in io.quarkus:quarkus-vertx-http (CVE-2026-39852)
vulnerability in io.quarkus:quarkus-vertx-http (CVE-2026-39852). Confidential information can be exposed externally. Mitigation: upgrade to `3.35.1.1` or later.
|
| CVE-2026-7412 |
|
SSRF (Server-Side Request Forgery) in org.eclipse.basyx:basyx.sdk (CVE-2026-7412)
SSRF in org.eclipse.basyx:basyx.sdk (CVE-2026-7412). Confidential information can be exposed externally. Mitigation: upgrade to `2.0.0-milestone-10` or later.
|
| CVE-2026-7306 |
|
Vulnerability in CVE-2026-7306 (CVE-2026-7306)
vulnerability in CVE-2026-7306 (CVE-2026-7306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7303 |
|
Vulnerability in CVE-2026-7303 (CVE-2026-7303)
vulnerability in CVE-2026-7303 (CVE-2026-7303). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7305 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-7305 (CVE-2026-7305)
SSRF in CVE-2026-7305 (CVE-2026-7305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27172 |
|
Unsafe Deserialization in apache (CVE-2026-27172)
vulnerability in apache (CVE-2026-27172). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40858 |
|
Unsafe Deserialization in apache (CVE-2026-40858)
vulnerability in apache (CVE-2026-40858). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40048 |
|
Unsafe Deserialization in apache (CVE-2026-40048)
vulnerability in apache (CVE-2026-40048). Successful exploitation can lead to full system takeover. Exploitable via ``java.security.KeyPair``.
|
| CVE-2026-40473 |
|
Unsafe Deserialization in apache (CVE-2026-40473)
vulnerability in apache (CVE-2026-40473). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41433 |
|
Path Traversal in go.opentelemetry.io/obi (CVE-2026-41433)
path traversal in go.opentelemetry.io/obi (CVE-2026-41433). Data can be tampered with by attackers. Exploitable via ``TMPDIR``. Mitigation: upgrade to `0.8.0` or later.
|
| CVE-2024-57728 KEV |
|
[KEV] Path Traversal in Simplehelp path-traversal (CVE-2024-57728)
path traversal in Simplehelp path-traversal (CVE-2024-57728). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-22016 |
|
Information Disclosure in java (CVE-2026-22016)
vulnerability in java (CVE-2026-22016). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.0, 8.0.491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1` or later.
|
| CVE-2026-41245 |
|
Path Traversal in path-traversal (CVE-2026-41245)
path traversal in path-traversal (CVE-2026-41245). Data can be tampered with by attackers. Exploitable via ``LocalFolderExtractor``.
|
| CVE-2026-40477 |
|
Vulnerability in thymeleaf (CVE-2026-40477)
vulnerability in thymeleaf (CVE-2026-40477). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40478 |
|
Vulnerability in thymeleaf (CVE-2026-40478)
vulnerability in thymeleaf (CVE-2026-40478). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5588 |
|
Vulnerability in CVE-2026-5588 (CVE-2026-5588)
vulnerability in CVE-2026-5588 (CVE-2026-5588). Data can be tampered with by attackers.
|