PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
org.apache.struts:struts2-core Apache Struts Remote Java Code Execution Critical 9.8 4 years ago 5 months ago
org.apache.struts:struts2-core Apache Struts 2 is Missing XML Validation High Risk 8.1 9 months ago 8 months ago
org.apache.struts:struts2-core Apache Struts has a Denial of Service vulnerability High Risk 8.2 10 months ago 10 months ago
org.apache.struts:struts2-core Apache Struts is Vulnerable to DoS via File Leak High Risk 7.5 10 months ago 10 months ago
org.apache.struts:struts2-core Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability High Risk 7.5 2 years ago 11 months ago
org.apache.struts:struts2-core Code injection in Apache Struts Critical 9.8 4 years ago 12 months ago
org.apache.struts:struts2-core Remote code execution in Apache Struts Critical 9.8 4 years ago 12 months ago
org.apache.struts:struts2-core Apache Struts vulnerable to remote command execution (RCE) due to improper input validation High Risk 8.1 8 years ago 12 months ago
org.apache.struts:struts2-core Apache Struts vulnerable to remote arbitrary command execution due to improper input validation Critical 10.0 8 years ago 12 months ago
org.apache.struts:struts2-core Apache Struts vulnerable to memory exhaustion High Risk 7.5 3 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts file upload logic is flawed Critical 9.8 1 year ago 1 year ago
org.apache.struts:struts2-core Apache Struts forced double OGNL evaluation High Risk 8.8 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts vulnerable to path traversal Critical 9.8 2 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts vulnerable to memory exhaustion Medium Risk 6.5 3 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts is vulnerable to Cross-site Scripting Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts2 Broken Access Control Vulnerability Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Cross-Site Request Forgery in Apache Struts Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Arbitrary code execution in Apache Struts 2 High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core ClassLoader manipulation in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Code injection in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core ClassLoader manipulation in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Incomplete exclude pattern in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Open redirect in Apache Struts Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts is vulnerable to Cross-site Scripting Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core ClassLoader manipulation in Apache Struts Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts directory traversal vulnerability Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Cross-Site Request Forgery in Apache Struts Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts Code injection due to conversion error High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts improper action name cleanup Critical 9.8 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts's CookieInterceptor component does not use the parameter-name whitelist Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Arbitrary code execution in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Arbitrary code execution in Apache Struts 2 High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Spring AOP functionality (Struts) vulnerable to DoS attack High Risk 7.5 8 years ago 1 year ago
org.apache.struts:struts2-core Cross-site Scripting in Apache Struts Low Risk 3.0 4 years ago 1 year ago
org.apache.struts:struts2-core ClassLoader manipulation in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Cross-site Scripting in Apache Struts Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Improper Control of Generation of Code in Apache Struts High Risk 8.0 4 years ago 1 year ago
org.apache.struts:struts2-core Apache Struts's ParameterInterceptor component does not prevent access to public constructors Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Server side object manipulation in Apache Struts Medium Risk 6.0 4 years ago 1 year ago
org.apache.struts:struts2-core Denial of service in Apache Struts Medium Risk 5.3 4 years ago 2 years ago
org.apache.struts:struts2-core Apache Struts vulnerable to arbitrary remote code execution due to improper input validation Critical 9.8 4 years ago 2 years ago
org.apache.struts:struts2-core Expression Language Injection in Apache Struts Critical 9.8 4 years ago 2 years ago
org.apache.struts:struts2-core Apache Struts vulnerable to possible DoS attack when using URLValidator Medium Risk 5.9 4 years ago 2 years ago
org.apache.struts:struts2-core Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used High Risk 7.5 8 years ago 2 years ago
org.apache.struts:struts2-core Apache Struts Improper Input Validation vulnerability Medium Risk 5.9 8 years ago 2 years ago
org.apache.struts:struts2-core Cross-site Scripting in Apache Struts Medium Risk 6.1 4 years ago 2 years ago
org.apache.struts:struts2-core Special top object can be used to access Struts' internals High Risk 7.5 4 years ago 2 years ago
org.apache.struts:struts2-core Struts ParameterInterceptor vulnerability allows remote command execution Critical 9.8 4 years ago 2 years ago
org.apache.struts:struts2-core Remote Code Execution in Apache Struts Critical 9.8 4 years ago 2 years ago
org.apache.struts:struts2-core Apache Struts RCE Vulnerability High Risk 8.8 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1