Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Talk to Our Experts

Get Pricing

Codey gradient

Filter by Severity

Filter by Technology

Filter by Category

Cryptanalysis

SQL Injection

Improper Certificate Validation

Code Injection

Inconsistent Interpretation of HTTP Requests

Cache Deception

Privilege Abuse

Regular Expression Denial of Service

Cache Poisoning

Log Injection

Cross-site Request Forgery

Insufficient Verification of Data Authenticity

Privilege Escalation

Incorrectly Configured Access Control

Broken Access

Improper Input Validation (4.16)

Improper Link Resolution Before File Access ('Link Following')

Heap-based Buffer Overflow

Buffer Over-read

Integer Overflow or Wraparound

Creation of Temporary File in Directory with Insecure Permissions

Uncontrolled Resource Consumption

Inefficient Algorithmic Complexity

Improper Handling of Highly Compressed Data (Data Amplification)

Use After Free

Unchecked Input for Loop Condition

Memory Allocation with Excessive Size Value

Access of Resource Using Incompatible Type ('Type Confusion')

Weak Authentication

Prototype Pollution

Server-Side Request Forgery

Improper Output Neutralization for Logs

Improper Session Handling

Use of Unmaintained Third Party

CBC Mode

Predictable Initialization Vector

Cryptographic Weakness

Search Injection

Authorization Bypass

Resource Injection

Remote Code Execution

Denial of Service

Information Exposure

HTTP Request Smuggling

Command Injection

URL Redirect/Open Redirect

Signature Forgery

Path Traversal

Content Spoofing

ReDoS Vulnerability

Cross-Site Scripting

Filtering by:

Severity

Text for Severity

Close icon

Clear Filters

Severity

Technology

Libraries Affected

Category

Version(s) Affected

Published Date

Medium

Open in new tab icon

CVE-2025-47705

Drupal 7

IFrame Remove Filter Module

Cross-Site Scripting

>=7.0.x <=7.1.5

Jan 8, 2026

Medium

Open in new tab icon

CVE-2025-14505

Elliptic

Cryptanalysis

<=6.6.1

Jan 8, 2026

Critical

Open in new tab icon

CVE-2019-17571

Apache Log4j

Code Injection

>= 1.2, <= 1.2.17

Jan 7, 2026

High

Open in new tab icon

CVE-2022-45868

H2 Database

Information Exposure

>= 1.4.198, < 2.2.220

Jan 5, 2026

Low

Open in new tab icon

CVE-2020-8908

Google Guava

Incorrectly Configured Access Control

<32.0.0

Jan 5, 2026

Medium

Open in new tab icon

CVE-2023-2976

Google Guava

Incorrectly Configured Access Control

<32.0.0

Jan 5, 2026

Medium

Open in new tab icon

CVE-2024-40094

GraphQL Java

Improper Input Validation (4.16)

<19.11, >=20.0 <20.9, >=21.0 <21.5

Jan 5, 2026

High

Open in new tab icon

CVE-2022-23302

Apache Log4j

Code Injection

>= 1.0.1, <= 1.2.17

Jan 5, 2026

Critical

Open in new tab icon

CVE-2020-9493

Apache Log4j

Code Injection

>= 1.2, <= 1.2.17

Jan 5, 2026

High

Open in new tab icon

CVE-2022-23305

Apache Log4j

SQL Injection

>= 1.2, <= 1.2.17

Jan 5, 2026

Low

Open in new tab icon

CVE-2020-9488

Apache Log4j

Improper Certificate Validation

>= 1.0, <= 1.2.17

Jan 5, 2026

High

Open in new tab icon

CVE-2021-4104

Apache Log4j

Code Injection

>= 1.2, <= 1.2.17

Jan 5, 2026

High

Open in new tab icon

CVE-2022-23307

Apache Log4j

Code Injection

>= 1.2, <= 1.2.17

Jan 5, 2026

High

Open in new tab icon

CVE-2022-1471

SnakeYAML

Remote Code Execution

>=1.0, <=1.33

Dec 18, 2025

High

Open in new tab icon

CVE-2023-25194

Spring

Apache Kafka

Remote Code Execution

>=2.3.0 <=3.3.2

Dec 16, 2025

Exclamation icon

No results found

Please enter a valid Vulnerability ID number or Technology name.

Thanks for signing up for our Newsletter! We look forward to connecting with you.

Oops! Something went wrong while submitting the form.

By clicking "Accept", you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

Preferences Reject Accept

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.