Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59315 | 5.3 (v3.1) | Spring Cloud Config Monitor Denial of Service |
Spring |
Spring Cloud Config |
2026-08-27T18:04:42.065Z | 2026-08-28T22:47:23.491Z |
| cve-2026-59314 | N/A | Spring Framework response splitting in ContentDisposition |
Spring |
Spring Framework |
2026-08-27T18:04:41.062Z | 2026-08-27T18:04:41.062Z |
| cve-2026-59311 | 6.8 (v3.1) | Fixed predictable /tmp/ziptransformer work directory e… |
Spring |
Spring Integration |
2026-08-27T18:04:40.084Z | 2026-08-28T22:47:29.614Z |
| cve-2026-59306 | 3.1 (v3.1) | Potential for deserialization of untrusted types in Sp… |
Spring |
Spring Cloud Stream |
2026-08-27T18:04:39.066Z | 2026-08-28T18:34:15.271Z |
| cve-2026-59313 | N/A | Server Sent Event stream corruption in Spring MVC func… |
Spring |
Spring Framework |
2026-08-27T17:58:03.621Z | 2026-08-28T19:59:45.069Z |
| cve-2026-59307 | 8 (v3.1) | Deserialization allow-list silently bypassed: setBeanC… |
Spring |
Spring Integration |
2026-08-27T17:58:02.683Z | 2026-08-29T03:55:53.369Z |
| cve-2026-59305 | 3.1 (v3.1) | Partition interceptor may be improperly added while se… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:01.756Z | 2026-08-28T18:34:56.205Z |
| cve-2026-59304 | 3.1 (v3.1) | Improper caching of the original content type in Sprin… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:00.802Z | 2026-08-28T22:47:36.173Z |
| cve-2026-59303 | 3.1 (v3.1) | Dynamic destination cache size is not properly bound i… |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:59.869Z | 2026-08-28T22:47:44.786Z |
| cve-2026-59302 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud Stream |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:58.899Z | 2026-08-28T22:47:52.531Z |
| cve-2026-59301 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.960Z | 2026-08-28T22:47:58.312Z |
| cve-2026-59300 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.010Z | 2026-08-28T22:48:05.882Z |
| cve-2026-59299 | 3.1 (v3.1) | Composition lookup can potentially poison base functio… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:56.024Z | 2026-08-28T22:48:12.246Z |
| cve-2026-59298 | 3.1 (v3.1) | Potential for improper filtering of HTTP headers in Sp… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:55.073Z | 2026-08-27T17:57:55.073Z |
| cve-2026-59297 | 3.1 (v3.1) | Spring Cloud Function can incorrectly determine if URI… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:53.989Z | 2026-08-28T18:35:31.544Z |
| cve-2026-59294 | 5.9 (v3.1) | Arbitrary File Write via Path Traversal in ResourceCac… |
Spring |
Spring AI |
2026-08-27T17:57:52.047Z | 2026-08-28T18:36:07.272Z |
| cve-2026-59293 | 6.6 (v3.1) | SMB minimum protocol dialect defaults to SMB1 |
Spring |
Spring Integration |
2026-08-27T17:57:51.016Z | 2026-08-28T18:36:46.105Z |
| cve-2026-59292 | 3.2 (v3.1) | World-readable metadata file in PropertiesPersistingMe… |
Spring |
Spring Integration |
2026-08-27T17:57:50.029Z | 2026-08-28T18:37:24.514Z |
| cve-2026-59291 | 2 (v3.1) | Potential arbitrary file read and SSRF vulnerability i… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:48.943Z | 2026-08-28T18:38:29.352Z |
| cve-2026-59289 | N/A | Spring for GraphQL Denial of Service via pagination support |
Spring |
Spring for GraphQL |
2026-08-27T17:57:47.944Z | 2026-08-27T17:57:47.944Z |
| cve-2026-59288 | N/A | Spring for GraphQL Information Exposure in GraphiQL support |
Spring |
Spring for GraphQL |
2026-08-27T17:57:46.990Z | 2026-08-27T17:57:46.990Z |
| cve-2026-59287 | N/A | Spring for GraphQL WebSocket Client Denial of Service |
Spring |
Spring for GraphQL |
2026-08-27T17:57:45.951Z | 2026-08-27T17:57:45.951Z |
| cve-2026-59286 | N/A | Spring for GraphQL loads Untrusted Resources in Graphi… |
Spring |
Spring for GraphQL |
2026-08-27T17:57:44.958Z | 2026-08-27T17:57:44.958Z |
| cve-2026-59285 | N/A | Spring for GraphQL Unsafe Deserialization in paginatio… |
Spring |
Spring for GraphQL |
2026-08-27T17:57:43.851Z | 2026-08-27T17:57:43.851Z |
| cve-2026-59284 | 6.6 (v3.1) | Spring Cloud Commons no allow list for writable env ac… |
Spring |
Spring Cloud Commons |
2026-08-27T17:57:42.527Z | 2026-08-28T18:32:18.345Z |
| cve-2026-59283 | N/A | Spring Framework Safety Guard Bypass via SpEL Expressi… |
Spring |
Spring Framework |
2026-08-27T17:57:40.065Z | 2026-08-28T18:40:46.456Z |
| cve-2026-59282 | N/A | Spring Framework Denial of Service via Unbounded List … |
Spring |
Spring Framework |
2026-08-27T17:57:38.575Z | 2026-08-28T18:30:40.789Z |
| cve-2026-59281 | N/A | Spring Framework Cross-site Scripting via EscapedErrors |
Spring |
Spring Framework |
2026-08-27T17:57:37.157Z | 2026-08-28T18:56:23.590Z |
| cve-2026-59277 | 3.7 (v3.1) | Spring Security InetAddressMatchers Incomplete Interna… |
Spring |
Spring Security |
2026-08-27T17:57:36.006Z | 2026-08-28T14:01:04.295Z |
| cve-2026-59276 | 5.9 (v3.1) | Timing Attack via Non-Constant-Time Comparison of Sens… |
Spring |
Spring Security |
2026-08-27T17:57:34.993Z | 2026-08-28T14:00:41.248Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000055 | WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting | 2021-06-22T15:06+09:00 | 2021-06-22T15:06+09:00 |
| jvndb-2021-000054 | Inkdrop vulnerable to OS command injection | 2021-06-22T15:06+09:00 | 2021-06-22T15:06+09:00 |
| jvndb-2021-000053 | Hitachi Virtual File Platform vulnerable to OS command injection | 2021-06-18T15:45+09:00 | 2021-06-18T15:45+09:00 |
| jvndb-2021-000052 | Hitachi Application Server Help vulnerable cross-site scripting | 2021-06-17T15:11+09:00 | 2021-06-17T15:11+09:00 |
| jvndb-2021-000051 | Multiple cross-site scripting vulnerabilities in multiple EC-CUBE plugins provided by EC-CUBE | 2021-06-16T16:18+09:00 | 2021-06-16T16:18+09:00 |
| jvndb-2021-000049 | Multiple ETUNA EC-CUBE plugins vulnerable to cross-site scripting | 2021-06-15T16:09+09:00 | 2021-06-16T11:52+09:00 |
| jvndb-2021-000050 | Multiple vulnerabilities in GROWI | 2021-06-14T15:10+09:00 | 2021-06-14T15:10+09:00 |
| jvndb-2021-000048 | Asken App for Android fails to restrict custom URL schemes properly | 2021-06-14T15:10+09:00 | 2021-06-14T15:10+09:00 |
| jvndb-2021-000047 | WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting | 2021-06-11T15:24+09:00 | 2021-06-11T15:24+09:00 |
| jvndb-2021-001756 | urllib3 vulnerable to Regular expression Denial-of-Service (ReDoS) | 2021-06-08T12:21+09:00 | 2021-06-08T12:21+09:00 |
| jvndb-2021-000046 | ATOM - Smart life App vulnerable to improper server certificate verification | 2021-06-03T14:05+09:00 | 2021-06-03T14:05+09:00 |
| jvndb-2021-000045 | goo blog App fails to restrict custom URL schemes properly | 2021-06-02T15:46+09:00 | 2021-06-02T15:46+09:00 |
| jvndb-2021-001575 | Multiple vulnerabilities in Buffalo WSR-1166DHP3 and WSR-1166DHP4 routers | 2021-06-01T15:18+09:00 | 2021-06-01T15:18+09:00 |
| jvndb-2021-000044 | Zettlr vulnerable to cross-site scripting | 2021-05-26T14:50+09:00 | 2021-06-03T16:21+09:00 |
| jvndb-2021-001506 | Hitachi Ops Center Analyzer vulnerability of communication using a certificate not intended by the user | 2021-05-25T14:11+09:00 | 2021-05-25T14:11+09:00 |
| jvndb-2021-000041 | The installers of ScanSnap Manager may insecurely load Dynamic Link Libraries | 2021-05-21T16:34+09:00 | 2021-05-21T16:34+09:00 |
| jvndb-2021-000043 | Installer of Overwolf may insecurely load Dynamic Link Libraries | 2021-05-21T16:07+09:00 | 2021-05-21T16:07+09:00 |
| jvndb-2021-000042 | Multiple cross-site scripting vulnerabilities in multiple PHP Factory products | 2021-05-21T15:38+09:00 | 2021-05-21T15:38+09:00 |
| jvndb-2021-000040 | QND vulnerable to privilege escalation | 2021-05-21T14:21+09:00 | 2021-05-21T14:21+09:00 |
| jvndb-2021-000037 | mod_auth_openidc vulnerable to denial-of-service (DoS) | 2021-05-14T15:35+09:00 | 2021-05-14T15:35+09:00 |
| jvndb-2021-000038 | Multiple vulnerabilities in Cisco Small Business Series Wireless Access Points | 2021-05-14T15:26+09:00 | 2021-05-14T15:26+09:00 |
| jvndb-2021-000039 | RFNTPS vulnerable to OS command injection | 2021-05-13T16:05+09:00 | 2021-05-13T16:05+09:00 |
| jvndb-2021-000036 | Multiple vulnerabilities in KonaWiki2 | 2021-05-13T16:05+09:00 | 2021-05-13T16:05+09:00 |
| jvndb-2021-000035 | EC-CUBE vulnerable to cross-site scripting | 2021-05-10T18:08+09:00 | 2021-05-10T18:08+09:00 |
| jvndb-2021-001380 | Multiple Buffalo network devices contain hidden functionality | 2021-04-28T16:15+09:00 | 2021-05-07T16:16+09:00 |
| jvndb-2021-001381 | Multiple vulnerabilities in Buffalo broadband routers | 2021-04-28T16:14+09:00 | 2021-05-07T16:28+09:00 |
| jvndb-2021-000034 | WordPress plugin "WP Fastest Cache" vulnerable to directory traversal | 2021-04-27T17:12+09:00 | 2021-04-27T17:12+09:00 |
| jvndb-2021-000033 | Hot Pepper Gourmet App fails to restrict access permissions | 2021-04-27T17:10+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000909 | yappa-ng vulnerable to cross-site scripting | 2021-04-22T16:33+09:00 | 2021-04-22T16:33+09:00 |
| jvndb-2021-001374 | Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2021-04-20T12:25+09:00 | 2021-04-20T12:25+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0075 | Multiples vulnérabilités dans GitLab | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0074 | Multiples vulnérabilités dans Oracle Weblogic | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0073 | Multiples vulnérabilités dans Oracle Virtualization | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0072 | Multiples vulnérabilités dans Oracle Systems | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0071 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0070 | Multiples vulnérabilités dans Oracle MySQL | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0069 | Multiples vulnérabilités dans Oracle Java SE | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0068 | Multiples vulnérabilités dans Oracle Database Server | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0067 | Multiples vulnérabilités dans Python | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0066 | Vulnérabilité dans Google Chrome | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0065 | Multiples vulnérabilités dans les produits Atlassian | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0064 | Vulnérabilité Microsoft Power Apps | 2026-01-19T00:00:00.000000 | 2026-01-19T00:00:00.000000 |
| certfr-2026-avi-0063 | Multiples vulnérabilités dans Microsoft Edge | 2026-01-19T00:00:00.000000 | 2026-01-19T00:00:00.000000 |
| certfr-2026-avi-0062 | Vulnérabilité dans Mattermost Desktop App | 2026-01-19T00:00:00.000000 | 2026-01-19T00:00:00.000000 |
| certfr-2026-avi-0061 | Multiples vulnérabilités dans les produits IBM | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0060 | Vulnérabilité dans Apache Struts | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0059 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0058 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0057 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0056 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0055 | Multiples vulnérabilités dans GLPI | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0054 | Multiples vulnérabilités dans Centreon Infra Monitoring | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0053 | Vulnérabilité dans Traefik | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0052 | Multiples vulnérabilités dans Mattermost Server | 2026-01-16T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0051 | Multiples vulnérabilités dans les produits Mozilla | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0050 | Multiples vulnérabilités dans les produits Juniper Networks | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0049 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0048 | Multiples vulnérabilités dans Wireshark | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0047 | Vulnérabilité dans F5 NGINX Ingress Controller | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0046 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |