Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81528 | 5.3 (v4.0) 5.4 (v3.1) | NoSQL injection via array replacement bypassing update… |
MongoDB |
C# Driver |
2026-08-27T18:32:30.215Z | 2026-08-28T15:45:22.840Z |
| cve-2026-81527 | 6.9 (v4.0) 6.5 (v3.1) | NoSQL injection via unquoted constant GroupBy keys in … |
MongoDB |
C# Driver |
2026-08-27T18:32:28.926Z | 2026-08-28T15:46:55.682Z |
| cve-2026-81526 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write redirection via unvalidated dotte… |
MongoDB |
Rust Driver |
2026-08-27T18:32:27.704Z | 2026-08-28T15:48:02.435Z |
| cve-2026-81525 | 8.6 (v4.0) 8.1 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
PHP Library |
2026-08-27T18:32:26.493Z | 2026-08-28T15:49:03.964Z |
| cve-2026-81524 | 5.3 (v4.0) 5.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
C Driver |
2026-08-27T18:32:25.355Z | 2026-08-28T15:50:10.011Z |
| cve-2026-81523 | 2 (v4.0) 4.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
libmongocrypt |
2026-08-27T18:32:24.206Z | 2026-08-28T15:51:12.001Z |
| cve-2026-81522 | 8.6 (v4.0) 8.1 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
C++ Driver |
2026-08-27T18:32:23.151Z | 2026-08-29T03:55:54.810Z |
| cve-2026-81521 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write retargeting via unvalidated dotte… |
MongoDB |
GO Driver |
2026-08-27T18:31:45.450Z | 2026-08-28T15:52:13.039Z |
| cve-2026-59324 | 8.2 (v3.1) | fluxTransform shared RequestMessageHolder causes cross… |
Spring |
Spring Integration |
2026-08-27T18:04:51.595Z | 2026-08-28T22:46:33.636Z |
| cve-2026-59322 | 6.3 (v3.1) | EmbeddedHeadersJsonMessageMapper default gives wire pe… |
Spring |
Spring Integration |
2026-08-27T18:04:50.137Z | 2026-08-28T22:46:40.016Z |
| cve-2026-59321 | 4.2 (v3.1) | Shared JSR-223 ScriptEngine evaluated concurrently wit… |
Spring |
Spring Integration |
2026-08-27T18:04:49.035Z | 2026-08-28T22:46:47.321Z |
| cve-2026-59320 | 6.5 (v3.1) | In Spring AMQP the link credit never replenished on li… |
Spring |
Spring AMQP |
2026-08-27T18:04:47.999Z | 2026-08-28T22:46:54.662Z |
| cve-2026-59319 | 4.3 (v3.1) | RediSearch Tag Injection in RedisChatMemoryRepository … |
Spring |
Spring AI |
2026-08-27T18:04:46.944Z | 2026-08-28T22:47:00.784Z |
| cve-2026-59317 | 6.5 (v3.1) | In Spring for Apache Kafka, missing header validation … |
Spring |
Spring for Apache Kafka |
2026-08-27T18:04:46.006Z | 2026-08-28T22:47:09.357Z |
| cve-2026-59316 | 8.2 (v3.1) | Spring Authorization Server Default Consent Page is vu… |
Spring |
Spring Authorization Server |
2026-08-27T18:04:44.963Z | 2026-08-28T22:47:16.884Z |
| cve-2026-59315 | 5.3 (v3.1) | Spring Cloud Config Monitor Denial of Service |
Spring |
Spring Cloud Config |
2026-08-27T18:04:42.065Z | 2026-08-28T22:47:23.491Z |
| cve-2026-59314 | N/A | Spring Framework response splitting in ContentDisposition |
Spring |
Spring Framework |
2026-08-27T18:04:41.062Z | 2026-08-27T18:04:41.062Z |
| cve-2026-59311 | 6.8 (v3.1) | Fixed predictable /tmp/ziptransformer work directory e… |
Spring |
Spring Integration |
2026-08-27T18:04:40.084Z | 2026-08-28T22:47:29.614Z |
| cve-2026-59306 | 3.1 (v3.1) | Potential for deserialization of untrusted types in Sp… |
Spring |
Spring Cloud Stream |
2026-08-27T18:04:39.066Z | 2026-08-28T18:34:15.271Z |
| cve-2026-59313 | N/A | Server Sent Event stream corruption in Spring MVC func… |
Spring |
Spring Framework |
2026-08-27T17:58:03.621Z | 2026-08-28T19:59:45.069Z |
| cve-2026-59307 | 8 (v3.1) | Deserialization allow-list silently bypassed: setBeanC… |
Spring |
Spring Integration |
2026-08-27T17:58:02.683Z | 2026-08-29T03:55:53.369Z |
| cve-2026-59305 | 3.1 (v3.1) | Partition interceptor may be improperly added while se… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:01.756Z | 2026-08-28T18:34:56.205Z |
| cve-2026-59304 | 3.1 (v3.1) | Improper caching of the original content type in Sprin… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:00.802Z | 2026-08-28T22:47:36.173Z |
| cve-2026-59303 | 3.1 (v3.1) | Dynamic destination cache size is not properly bound i… |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:59.869Z | 2026-08-28T22:47:44.786Z |
| cve-2026-59302 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud Stream |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:58.899Z | 2026-08-28T22:47:52.531Z |
| cve-2026-59301 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.960Z | 2026-08-28T22:47:58.312Z |
| cve-2026-59300 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.010Z | 2026-08-28T22:48:05.882Z |
| cve-2026-59299 | 3.1 (v3.1) | Composition lookup can potentially poison base functio… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:56.024Z | 2026-08-28T22:48:12.246Z |
| cve-2026-59298 | 3.1 (v3.1) | Potential for improper filtering of HTTP headers in Sp… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:55.073Z | 2026-08-27T17:57:55.073Z |
| cve-2026-59297 | 3.1 (v3.1) | Spring Cloud Function can incorrectly determine if URI… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:53.989Z | 2026-08-28T18:35:31.544Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000080 | baserCMS vulnerable to cross-site scripting | 2021-08-27T13:29+09:00 | 2021-08-27T13:29+09:00 |
| jvndb-2021-000079 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-08-25T14:54+09:00 | 2021-08-25T14:54+09:00 |
| jvndb-2021-000078 | The installers of multiple Sony products may insecurely load Dynamic Link Libraries | 2021-08-24T14:30+09:00 | 2021-08-24T14:30+09:00 |
| jvndb-2021-002282 | Multiple vulnerabilities in Navigate CMS | 2021-08-20T14:25+09:00 | 2021-08-20T14:25+09:00 |
| jvndb-2021-002279 | Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises | 2021-08-19T15:01+09:00 | 2021-08-19T15:01+09:00 |
| jvndb-2021-000077 | Huawei EchoLife HG8045Q vulnerable to OS command injection | 2021-08-17T14:24+09:00 | 2021-08-17T14:24+09:00 |
| jvndb-2021-002273 | Multiple vulnerabilities in D-Link router DSL-2750U | 2021-08-17T14:09+09:00 | 2021-08-17T14:09+09:00 |
| jvndb-2021-000076 | Plone vulnerable to open redirect | 2021-08-12T14:05+09:00 | 2021-08-12T14:05+09:00 |
| jvndb-2021-000075 | WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting | 2021-08-10T14:40+09:00 | 2021-08-10T14:40+09:00 |
| jvndb-2021-002077 | Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises | 2021-08-04T11:15+09:00 | 2021-08-04T11:15+09:00 |
| jvndb-2021-000073 | Multiple vulnerabilities in Cybozu Garoon | 2021-08-02T16:42+09:00 | 2022-05-24T15:16+09:00 |
| jvndb-2021-000072 | Minecraft Java Edition vulnerable to directory traversal | 2021-07-21T15:12+09:00 | 2021-07-21T15:12+09:00 |
| jvndb-2021-002005 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting | 2021-07-19T16:53+09:00 | 2021-07-19T16:53+09:00 |
| jvndb-2021-000070 | Multiple vulnerabilities in GroupSession | 2021-07-19T15:41+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000069 | Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery | 2021-07-14T17:13+09:00 | 2021-07-14T17:13+09:00 |
| jvndb-2021-000068 | Multiple vulnerabilities in Retty App | 2021-07-13T14:34+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000067 | voidtools "Everything" vulnerable to HTTP header injection | 2021-07-09T14:40+09:00 | 2021-07-09T14:40+09:00 |
| jvndb-2021-000065 | WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery | 2021-07-08T14:29+09:00 | 2021-07-08T14:29+09:00 |
| jvndb-2021-000066 | WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery | 2021-07-08T13:45+09:00 | 2021-07-08T13:45+09:00 |
| jvndb-2021-001977 | Multiple vulnerabilities in Elecom routers | 2021-07-07T14:03+09:00 | 2021-07-12T16:04+09:00 |
| jvndb-2021-000064 | GU App for Android fails to restrict access permissions | 2021-07-07T13:16+09:00 | 2021-07-07T13:16+09:00 |
| jvndb-2021-001968 | Multiple vulnerabilities in Trend Micro Password Manager | 2021-07-06T16:08+09:00 | 2021-07-06T16:08+09:00 |
| jvndb-2021-000063 | WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery | 2021-07-06T14:50+09:00 | 2021-07-06T14:50+09:00 |
| jvndb-2021-000062 | WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery | 2021-07-06T14:11+09:00 | 2021-07-06T14:11+09:00 |
| jvndb-2021-000061 | A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass | 2021-07-05T14:28+09:00 | 2021-07-05T14:28+09:00 |
| jvndb-2021-000059 | EC-CUBE fails to restrict access permissions | 2021-07-01T15:49+09:00 | 2021-07-01T15:49+09:00 |
| jvndb-2007-002102 | boastMachine vulnerable to cross-site scripting | 2021-06-30T14:32+09:00 | 2021-06-30T14:32+09:00 |
| jvndb-2021-000058 | IkaIka RSS Reader vulnerable to cross-site scripting | 2021-06-30T14:21+09:00 | 2021-06-30T14:21+09:00 |
| jvndb-2021-000056 | WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting | 2021-06-30T11:36+09:00 | 2021-06-30T11:36+09:00 |
| jvndb-2021-000057 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2021-06-23T15:15+09:00 | 2021-06-23T15:15+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0105 | Vulnérabilité dans Microsoft Edge | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0104 | Vulnérabilité dans Qnap QTS | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0103 | Multiples vulnérabilités dans Node.js | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0102 | Vulnérabilité dans Splunk Enterprise | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0101 | Multiples vulnérabilités dans les produits Siemens | 2026-01-29T00:00:00.000000 | 2026-01-29T00:00:00.000000 |
| certfr-2026-avi-0100 | Multiples vulnérabilités dans les produits WithSecure | 2026-01-29T00:00:00.000000 | 2026-01-29T00:00:00.000000 |
| certfr-2026-avi-0099 | Multiples vulnérabilités dans SolarWinds Web Help Desk | 2026-01-28T00:00:00.000000 | 2026-01-29T00:00:00.000000 |
| certfr-2026-avi-0098 | Vulnérabilité dans les produits Symfony | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0097 | Vulnérabilité dans les produits Fortinet | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0096 | Multiples vulnérabilités dans OpenSSL | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0095 | Multiples vulnérabilités dans les produits Mozilla | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0094 | Multiples vulnérabilités dans HPE Aruba Networking Fabric Composer | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0093 | Multiples vulnérabilités dans Tenable Network Monitor | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0092 | Vulnérabilité dans Google Chrome | 2026-01-28T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2026-avi-0091 | Multiples vulnérabilités dans Xen | 2026-01-27T00:00:00.000000 | 2026-01-27T00:00:00.000000 |
| certfr-2026-avi-0090 | Multiples vulnérabilités dans Citrix XenServer | 2026-01-27T00:00:00.000000 | 2026-01-27T00:00:00.000000 |
| certfr-2026-avi-0089 | Vulnérabilité dans Microsoft Office | 2026-01-27T00:00:00.000000 | 2026-01-27T00:00:00.000000 |
| certfr-2026-avi-0088 | Vulnérabilité dans MariaDB | 2026-01-27T00:00:00.000000 | 2026-01-27T00:00:00.000000 |
| certfr-2026-avi-0087 | Vulnérabilité dans les produits Belden | 2026-01-26T00:00:00.000000 | 2026-01-26T00:00:00.000000 |
| certfr-2026-avi-0086 | Vulnérabilité dans CPython | 2026-01-26T00:00:00.000000 | 2026-01-26T00:00:00.000000 |
| certfr-2026-avi-0085 | Multiples vulnérabilités dans NetApp Brocade SAN Navigator | 2026-01-26T00:00:00.000000 | 2026-01-26T00:00:00.000000 |
| certfr-2026-avi-0084 | Vulnérabilité dans Microsoft Edge | 2026-01-26T00:00:00.000000 | 2026-01-26T00:00:00.000000 |
| certfr-2026-avi-0083 | Multiples vulnérabilités dans les produits IBM | 2026-01-23T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2026-avi-0082 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-23T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2026-avi-0081 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-23T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2026-avi-0080 | Vulnérabilité dans Broadcom Web Security Services Agent | 2026-01-23T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2026-avi-0079 | Vulnérabilité dans Python | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0078 | Vulnérabilité dans Ceph | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0077 | Multiples vulnérabilités dans les produits Symantec | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0076 | Vulnérabilité dans les produits Cisco | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |