Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59300 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.010Z | 2026-08-28T22:48:05.882Z |
| cve-2026-59299 | 3.1 (v3.1) | Composition lookup can potentially poison base functio… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:56.024Z | 2026-08-28T22:48:12.246Z |
| cve-2026-59298 | 3.1 (v3.1) | Potential for improper filtering of HTTP headers in Sp… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:55.073Z | 2026-08-27T17:57:55.073Z |
| cve-2026-59297 | 3.1 (v3.1) | Spring Cloud Function can incorrectly determine if URI… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:53.989Z | 2026-08-28T18:35:31.544Z |
| cve-2026-59294 | 5.9 (v3.1) | Arbitrary File Write via Path Traversal in ResourceCac… |
Spring |
Spring AI |
2026-08-27T17:57:52.047Z | 2026-08-28T18:36:07.272Z |
| cve-2026-59293 | 6.6 (v3.1) | SMB minimum protocol dialect defaults to SMB1 |
Spring |
Spring Integration |
2026-08-27T17:57:51.016Z | 2026-08-28T18:36:46.105Z |
| cve-2026-59292 | 3.2 (v3.1) | World-readable metadata file in PropertiesPersistingMe… |
Spring |
Spring Integration |
2026-08-27T17:57:50.029Z | 2026-08-28T18:37:24.514Z |
| cve-2026-59291 | 2 (v3.1) | Potential arbitrary file read and SSRF vulnerability i… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:48.943Z | 2026-08-28T18:38:29.352Z |
| cve-2026-59289 | N/A | Spring for GraphQL Denial of Service via pagination support |
Spring |
Spring for GraphQL |
2026-08-27T17:57:47.944Z | 2026-08-27T17:57:47.944Z |
| cve-2026-59288 | N/A | Spring for GraphQL Information Exposure in GraphiQL support |
Spring |
Spring for GraphQL |
2026-08-27T17:57:46.990Z | 2026-08-27T17:57:46.990Z |
| cve-2026-59287 | N/A | Spring for GraphQL WebSocket Client Denial of Service |
Spring |
Spring for GraphQL |
2026-08-27T17:57:45.951Z | 2026-08-27T17:57:45.951Z |
| cve-2026-59286 | N/A | Spring for GraphQL loads Untrusted Resources in Graphi… |
Spring |
Spring for GraphQL |
2026-08-27T17:57:44.958Z | 2026-08-27T17:57:44.958Z |
| cve-2026-59285 | N/A | Spring for GraphQL Unsafe Deserialization in paginatio… |
Spring |
Spring for GraphQL |
2026-08-27T17:57:43.851Z | 2026-08-27T17:57:43.851Z |
| cve-2026-59284 | 6.6 (v3.1) | Spring Cloud Commons no allow list for writable env ac… |
Spring |
Spring Cloud Commons |
2026-08-27T17:57:42.527Z | 2026-08-28T18:32:18.345Z |
| cve-2026-59283 | N/A | Spring Framework Safety Guard Bypass via SpEL Expressi… |
Spring |
Spring Framework |
2026-08-27T17:57:40.065Z | 2026-08-28T18:40:46.456Z |
| cve-2026-59282 | N/A | Spring Framework Denial of Service via Unbounded List … |
Spring |
Spring Framework |
2026-08-27T17:57:38.575Z | 2026-08-28T18:30:40.789Z |
| cve-2026-59281 | N/A | Spring Framework Cross-site Scripting via EscapedErrors |
Spring |
Spring Framework |
2026-08-27T17:57:37.157Z | 2026-08-28T18:56:23.590Z |
| cve-2026-59277 | 3.7 (v3.1) | Spring Security InetAddressMatchers Incomplete Interna… |
Spring |
Spring Security |
2026-08-27T17:57:36.006Z | 2026-08-28T14:01:04.295Z |
| cve-2026-59276 | 5.9 (v3.1) | Timing Attack via Non-Constant-Time Comparison of Sens… |
Spring |
Spring Security |
2026-08-27T17:57:34.993Z | 2026-08-28T14:00:41.248Z |
| cve-2026-4398 | 5.4 (v3.1) | Authorization Bypass Through User-Controlled Key in GitLab |
GitLab |
GitLab |
2026-08-27T17:53:14.609Z | 2026-08-28T14:13:54.361Z |
| cve-2026-76640 | 7.7 (v4.0) 7.5 (v3.1) | Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisionin… |
Unitree Robotics |
G1 EDU |
2026-08-27T17:52:11.749Z | 2026-08-28T15:53:16.149Z |
| cve-2026-76639 | 8.7 (v4.0) 8.8 (v3.1) | Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridg… |
Unitree Robotics |
G1 EDU |
2026-08-27T17:51:46.346Z | 2026-08-31T18:56:06.235Z |
| cve-2026-65931 | 5.1 (v4.0) | LimeSurvey Community Edition 7.0.5 - Improper authoriz… |
LimeSurvey |
LimeSurvey |
2026-08-27T17:50:47.311Z | 2026-08-28T14:13:54.515Z |
| cve-2026-48996 | Trilium: Malicious import with GeoMap marker title XSS… |
TriliumNext |
Trilium |
2026-08-27T17:36:07.483Z | 2026-08-29T03:56:03.899Z | |
| cve-2026-75889 | CVE-2026-75889 CVE Record |
Grafana |
Alloy |
2026-08-27T17:22:22.328Z | 2026-08-28T16:55:05.074Z | |
| cve-2026-54732 | libreoffice-convert: path traversal / arbitrary file write |
elwerene |
libreoffice-convert |
2026-08-27T17:21:50.743Z | 2026-08-28T14:54:16.963Z | |
| cve-2026-54718 | Silverstripe Advanced Workflow: Remote code execution … |
silverstripe |
silverstripe-advancedworkflow |
2026-08-27T17:19:51.691Z | 2026-08-31T18:17:17.110Z | |
| cve-2026-55758 | CC: Tweaked: Incomplete fix for GHSA-5jh9-2h63-pw4q: R… |
cc-tweaked |
CC-Tweaked |
2026-08-27T17:11:00.307Z | 2026-08-28T18:04:09.124Z | |
| cve-2026-54687 | n8n-nodes-sqlite3: Path traversal via user-controlled … |
DangerBlack |
n8n-node-sqlite3 |
2026-08-27T17:06:40.278Z | 2026-08-28T18:05:12.764Z | |
| cve-2026-19092 | Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Arg… |
Unknown |
Tutor LMS |
2026-08-27T17:05:37.621Z | 2026-08-28T13:03:21.752Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000031 | Gurunavi Apps fail to restrict access permissions | 2021-04-14T17:22+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-001345 | Information Disclosure Vulnerability in Cosminexus | 2021-04-13T16:46+09:00 | 2021-04-13T16:46+09:00 |
| jvndb-2021-001344 | Vulnerability in JP1/VERITAS | 2021-04-13T16:42+09:00 | 2021-04-13T16:42+09:00 |
| jvndb-2021-001343 | D-Link DAP-1880AC contains multiple vulnerabilities | 2021-04-12T15:32+09:00 | 2021-04-12T15:32+09:00 |
| jvndb-2021-000028 | Multiple vulnerabilities in multiple Aterm products | 2021-04-09T17:16+09:00 | 2021-04-09T17:16+09:00 |
| jvndb-2021-000030 | Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP | 2021-04-09T16:42+09:00 | 2021-04-09T16:42+09:00 |
| jvndb-2021-000029 | Archive collectively operation utility vulnerable to directory traversal | 2021-04-01T14:44+09:00 | 2021-04-01T14:44+09:00 |
| jvndb-2021-000027 | Multiple vulnerabilities in baserCMS | 2021-03-26T14:25+09:00 | 2021-03-26T14:25+09:00 |
| jvndb-2021-000908 | rNote vulnerable to cross-site scripting | 2021-03-25T18:14+09:00 | 2021-03-25T18:14+09:00 |
| jvndb-2021-000907 | Yomi-Search vulnerable to cross-site scripting | 2021-03-25T18:12+09:00 | 2021-03-25T18:12+09:00 |
| jvndb-2021-000906 | Yomi-Search vulnerable to cross-site scripting | 2021-03-25T18:06+09:00 | 2021-03-25T18:06+09:00 |
| jvndb-2021-000905 | Yomi-Search vulnerable to cross-site scripting | 2021-03-25T18:01+09:00 | 2021-03-25T18:01+09:00 |
| jvndb-2021-000904 | Click Ranker vulnerable to cross-site scripting | 2021-03-25T17:52+09:00 | 2021-03-25T17:52+09:00 |
| jvndb-2021-000903 | Kagemai vulnerable to cross-site request forgery | 2021-03-25T17:50+09:00 | 2021-03-25T17:50+09:00 |
| jvndb-2021-000902 | Kagemai vulnerable to cross-site scripting | 2021-03-25T17:46+09:00 | 2021-03-25T17:46+09:00 |
| jvndb-2021-000901 | Kagemai vulnerable to cross-site scripting | 2021-03-25T17:43+09:00 | 2021-03-25T17:43+09:00 |
| jvndb-2021-000900 | MagazinegerZ vulnerable to cross-site scripting | 2021-03-25T17:32+09:00 | 2021-03-25T17:32+09:00 |
| jvndb-2021-000023 | UNIVERGE Aspire series PBX vulnerable to denial-of-service (DoS) | 2021-03-22T14:57+09:00 | 2021-03-22T14:57+09:00 |
| jvndb-2021-000026 | Fuji Xerox multifunction devices and printers vulnerable to denial-of-service (DoS) | 2021-03-19T15:32+09:00 | 2021-04-12T13:30+09:00 |
| jvndb-2021-000025 | WordPress plugin "Paid Memberships Pro" vulnerable to SQL injection | 2021-03-17T16:24+09:00 | 2021-03-17T16:24+09:00 |
| jvndb-2021-000022 | Multiple vulnerabilities in Cybozu Office | 2021-03-15T15:56+09:00 | 2021-12-17T17:51+09:00 |
| jvndb-2021-000021 | M-System DL8 contains multiple vulnerabilities | 2021-03-12T15:59+09:00 | 2021-03-12T15:59+09:00 |
| jvndb-2021-000020 | Installer of MagicConnect Client program may insecurely load Dynamic Link Libraries | 2021-03-11T14:53+09:00 | 2021-03-11T14:53+09:00 |
| jvndb-2021-000019 | Multiple cross-site scripting vulnerabilities in GROWI | 2021-03-10T16:11+09:00 | 2021-03-10T16:11+09:00 |
| jvndb-2021-001123 | Multiple vulnerabilities in GROWI | 2021-03-09T14:17+09:00 | 2021-09-24T13:34+09:00 |
| jvndb-2021-001122 | Trend Micro Security (Consumer) vulnerable to code injection | 2021-03-08T17:26+09:00 | 2021-03-08T17:26+09:00 |
| jvndb-2021-000018 | The installers of E START products may insecurely load Dynamic Link Libraries | 2021-03-05T17:03+09:00 | 2023-11-16T15:41+09:00 |
| jvndb-2021-000017 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-02-24T15:20+09:00 | 2021-02-24T15:20+09:00 |
| jvndb-2021-000016 | Multiple vulnerabilities in SolarView Compact | 2021-02-19T16:44+09:00 | 2021-02-25T15:31+09:00 |
| jvndb-2021-001026 | Multiple Vulnerabilities in JP1/Automatic Operation | 2021-02-16T17:23+09:00 | 2021-02-16T17:23+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0045 | Multiples vulnérabilités dans Microsoft Azure | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0044 | Multiples vulnérabilités dans Microsoft Windows | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0043 | Multiples vulnérabilités dans Microsoft Office | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0042 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0041 | Multiples vulnérabilités dans les produits Elastic | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0040 | Multiples vulnérabilités dans Google Chrome | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0039 | Multiples vulnérabilités dans Node.js | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0038 | Multiples vulnérabilités dans les produits Mozilla | 2026-01-14T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0037 | Multiples vulnérabilités dans Typo3 | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0036 | Multiples vulnérabilités dans Suricata | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0035 | Multiples vulnérabilités dans les produits Fortinet | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0034 | Multiples vulnérabilités dans les produits SAP | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0033 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0032 | Multiples vulnérabilités dans les produits Siemens | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0031 | Vulnérabilité dans le greffon VSCode pour Spring CLI | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0030 | Vulnérabilité dans MISP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0029 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0028 | Multiples vulnérabilités dans MariaDB | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0027 | Vulnérabilité dans NetApp ONTAP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0026 | Vulnérabilité dans Google Pixel | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0025 | Vulnérabilité dans Microsoft Edge | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0024 | Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0023 | Multiples vulnérabilités dans les produits Axis | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0022 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |