Search Results (42 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2010-3300 1 Owasp 1 Enterprise Security Api For Java 2024-11-21 5.9 Medium
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
CVE-2023-48171 1 Owasp 1 Defectdojo 2024-09-18 8.8 High
An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.