Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-23902 is an incorrect authorization vulnerability in Apache DolphinScheduler prior to version 3.4.1. Authenticated users with system login permissions can execute workflows using tenants not defined on the platform. This could lead to unauthorized access or actions within the system. The vulnerability has a high severity with a CVSS score of 8.1. Users are advised to upgrade to version 3.4.1, which addresses this issue. Join the discussion | CVE Database V5 | 04/24/2026, 10:56:18 UTC Added: 04/24/2026, 11:51:04 UTC |
0 CVE-2025-62233 is a deserialization of untrusted data vulnerability in the Apache DolphinScheduler RPC module affecting versions 3.2.0 up to but not including 3.3.1. An attacker with access to Master or Worker nodes can exploit this by sending malicious RPC requests that inject harmful class types, potentially compromising the system. The issue is fixed in version 3.3.1. The vulnerability has a CVSS score of 6. Join the discussion | CVE Database V5 | 04/24/2026, 10:54:55 UTC Added: 04/24/2026, 11:06:03 UTC |
CVE-2025-62188 is a high-severity vulnerability in Apache DolphinScheduler version 3.1.0 that allows unauthorized actors to access sensitive information, including database credentials. This exposure of sensitive information (CWE-200) can lead to confidentiality breaches. The vulnerability affects management endpoints that are overly exposed by default. Users are advised to upgrade to version 3.2.0 or later to remediate the issue. As a temporary workaround, restricting exposed management endpoints via environment variables or application configuration is recommended. No known exploits are reported in the wild. Join the discussion | CVE Database V5 | 04/09/2026, 09:27:13 UTC Added: 04/09/2026, 10:05:47 UTC |
0 Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue. Join the discussion | CVE Database V5 | 09/03/2025, 09:10:24 UTC Added: 11/04/2025, 21:24:21 UTC |
0 Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue. Join the discussion | CVE Database V5 | 09/03/2025, 08:38:32 UTC Added: 11/04/2025, 21:24:19 UTC |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. The information exposed to unauthorized actors may include sensitive data such as database credentials. Users who can't upgrade to the fixed version can also set environment variable `MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health,metrics,prometheus` to workaround this, or add the following section in the `application.yaml` file ``` management: endpoints: web: exposure: include: health,metrics,prometheus ``` This issue affects Apache DolphinScheduler: from 3.0.0 before 3.0.2. Users are recommended to upgrade to version 3.0.2, which fixes the issue. Join the discussion | CVE Database V5 | 11/24/2023, 07:56:43 UTC Added: 11/28/2025, 11:12:09 UTC |
Showing 1 to 6 of 6 results