Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81523 | 2 (v4.0) 4.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
libmongocrypt |
2026-08-27T18:32:24.206Z | 2026-08-28T15:51:12.001Z |
| cve-2026-81522 | 8.6 (v4.0) 8.1 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
C++ Driver |
2026-08-27T18:32:23.151Z | 2026-08-29T03:55:54.810Z |
| cve-2026-81521 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write retargeting via unvalidated dotte… |
MongoDB |
GO Driver |
2026-08-27T18:31:45.450Z | 2026-08-28T15:52:13.039Z |
| cve-2026-59324 | 8.2 (v3.1) | fluxTransform shared RequestMessageHolder causes cross… |
Spring |
Spring Integration |
2026-08-27T18:04:51.595Z | 2026-08-28T22:46:33.636Z |
| cve-2026-59322 | 6.3 (v3.1) | EmbeddedHeadersJsonMessageMapper default gives wire pe… |
Spring |
Spring Integration |
2026-08-27T18:04:50.137Z | 2026-08-28T22:46:40.016Z |
| cve-2026-59321 | 4.2 (v3.1) | Shared JSR-223 ScriptEngine evaluated concurrently wit… |
Spring |
Spring Integration |
2026-08-27T18:04:49.035Z | 2026-08-28T22:46:47.321Z |
| cve-2026-59320 | 6.5 (v3.1) | In Spring AMQP the link credit never replenished on li… |
Spring |
Spring AMQP |
2026-08-27T18:04:47.999Z | 2026-08-28T22:46:54.662Z |
| cve-2026-59319 | 4.3 (v3.1) | RediSearch Tag Injection in RedisChatMemoryRepository … |
Spring |
Spring AI |
2026-08-27T18:04:46.944Z | 2026-08-28T22:47:00.784Z |
| cve-2026-59317 | 6.5 (v3.1) | In Spring for Apache Kafka, missing header validation … |
Spring |
Spring for Apache Kafka |
2026-08-27T18:04:46.006Z | 2026-08-28T22:47:09.357Z |
| cve-2026-59316 | 8.2 (v3.1) | Spring Authorization Server Default Consent Page is vu… |
Spring |
Spring Authorization Server |
2026-08-27T18:04:44.963Z | 2026-08-28T22:47:16.884Z |
| cve-2026-59315 | 5.3 (v3.1) | Spring Cloud Config Monitor Denial of Service |
Spring |
Spring Cloud Config |
2026-08-27T18:04:42.065Z | 2026-08-28T22:47:23.491Z |
| cve-2026-59314 | N/A | Spring Framework response splitting in ContentDisposition |
Spring |
Spring Framework |
2026-08-27T18:04:41.062Z | 2026-08-27T18:04:41.062Z |
| cve-2026-59311 | 6.8 (v3.1) | Fixed predictable /tmp/ziptransformer work directory e… |
Spring |
Spring Integration |
2026-08-27T18:04:40.084Z | 2026-08-28T22:47:29.614Z |
| cve-2026-59306 | 3.1 (v3.1) | Potential for deserialization of untrusted types in Sp… |
Spring |
Spring Cloud Stream |
2026-08-27T18:04:39.066Z | 2026-08-28T18:34:15.271Z |
| cve-2026-59313 | N/A | Server Sent Event stream corruption in Spring MVC func… |
Spring |
Spring Framework |
2026-08-27T17:58:03.621Z | 2026-08-28T19:59:45.069Z |
| cve-2026-59307 | 8 (v3.1) | Deserialization allow-list silently bypassed: setBeanC… |
Spring |
Spring Integration |
2026-08-27T17:58:02.683Z | 2026-08-29T03:55:53.369Z |
| cve-2026-59305 | 3.1 (v3.1) | Partition interceptor may be improperly added while se… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:01.756Z | 2026-08-28T18:34:56.205Z |
| cve-2026-59304 | 3.1 (v3.1) | Improper caching of the original content type in Sprin… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:00.802Z | 2026-08-28T22:47:36.173Z |
| cve-2026-59303 | 3.1 (v3.1) | Dynamic destination cache size is not properly bound i… |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:59.869Z | 2026-08-28T22:47:44.786Z |
| cve-2026-59302 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud Stream |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:58.899Z | 2026-08-28T22:47:52.531Z |
| cve-2026-59301 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.960Z | 2026-08-28T22:47:58.312Z |
| cve-2026-59300 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.010Z | 2026-08-28T22:48:05.882Z |
| cve-2026-59299 | 3.1 (v3.1) | Composition lookup can potentially poison base functio… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:56.024Z | 2026-08-28T22:48:12.246Z |
| cve-2026-59298 | 3.1 (v3.1) | Potential for improper filtering of HTTP headers in Sp… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:55.073Z | 2026-08-27T17:57:55.073Z |
| cve-2026-59297 | 3.1 (v3.1) | Spring Cloud Function can incorrectly determine if URI… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:53.989Z | 2026-08-28T18:35:31.544Z |
| cve-2026-59294 | 5.9 (v3.1) | Arbitrary File Write via Path Traversal in ResourceCac… |
Spring |
Spring AI |
2026-08-27T17:57:52.047Z | 2026-08-28T18:36:07.272Z |
| cve-2026-59293 | 6.6 (v3.1) | SMB minimum protocol dialect defaults to SMB1 |
Spring |
Spring Integration |
2026-08-27T17:57:51.016Z | 2026-08-28T18:36:46.105Z |
| cve-2026-59292 | 3.2 (v3.1) | World-readable metadata file in PropertiesPersistingMe… |
Spring |
Spring Integration |
2026-08-27T17:57:50.029Z | 2026-08-28T18:37:24.514Z |
| cve-2026-59291 | 2 (v3.1) | Potential arbitrary file read and SSRF vulnerability i… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:48.943Z | 2026-08-28T18:38:29.352Z |
| cve-2026-59289 | N/A | Spring for GraphQL Denial of Service via pagination support |
Spring |
Spring for GraphQL |
2026-08-27T17:57:47.944Z | 2026-08-27T17:57:47.944Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000081 | Apache Cordova Plugin camera vulnerable to information exposure | 2020-12-07T16:34+09:00 | 2020-12-07T16:34+09:00 |
| jvndb-2020-000080 | Multiple vulnerabilities in EC-CUBE | 2020-12-03T18:15+09:00 | 2020-12-03T18:15+09:00 |
| jvndb-2020-000079 | desknet's NEO vulnerable to cross-site scripting | 2020-12-03T17:54+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2020-000077 | Multiple vulnerabilities in GROWI | 2020-11-25T14:54+09:00 | 2020-11-25T14:54+09:00 |
| jvndb-2020-000076 | NETGEAR GS108Ev3 vulnerable to cross-site request forgery | 2020-11-24T14:32+09:00 | 2020-11-24T14:32+09:00 |
| jvndb-2020-000075 | The installers of multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries | 2020-11-20T15:39+09:00 | 2020-11-20T15:39+09:00 |
| jvndb-2020-009590 | Trend Micro Security 2020 (Consumer) is vulnerable to arbitrary file deletion | 2020-11-19T18:03+09:00 | 2020-11-19T18:03+09:00 |
| jvndb-2020-000074 | Hibernate ORM vulnerable to SQL injection | 2020-11-19T14:33+09:00 | 2020-11-19T14:33+09:00 |
| jvndb-2020-009584 | Multiple vulnerabilities in KonaWiki3 | 2020-11-18T18:13+09:00 | 2020-11-18T18:13+09:00 |
| jvndb-2020-000073 | Movable Type Premium vulnerable to cross-site scripting | 2020-11-18T18:01+09:00 | 2020-11-18T18:01+09:00 |
| jvndb-2020-000072 | MELSEC iQ-R Series CPU Modules vulnerable to uncontrolled resource consumption | 2020-11-12T14:58+09:00 | 2020-11-13T12:06+09:00 |
| jvndb-2020-009467 | Multiple vulnerabilities in XOOPS module "XooNIps" | 2020-11-09T15:10+09:00 | 2020-11-09T15:10+09:00 |
| jvndb-2020-000070 | Studyplus App uses a hard-coded API key for an external service | 2020-11-05T18:43+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2020-000071 | Cybozu Garoon vulnerable to improper input validation | 2020-11-05T11:43+09:00 | 2021-08-02T11:08+09:00 |
| jvndb-2020-009141 | Local File Inclusion vulnerability in OneThird CMS | 2020-10-21T15:21+09:00 | 2020-10-21T15:21+09:00 |
| jvndb-2020-000069 | Multiple vulnerabilities in WordPress Plugin "Simple Download Monitor" | 2020-10-21T14:50+09:00 | 2020-10-21T14:50+09:00 |
| jvndb-2020-000068 | WordPress Plugin "Live Chat - Live support" vulnerable to cross-site request forgery | 2020-10-14T15:32+09:00 | 2020-10-14T15:32+09:00 |
| jvndb-2020-008931 | Trend Micro Antivirus for Mac vulnerable to a privilege escalation | 2020-10-07T15:10+09:00 | 2020-10-07T15:10+09:00 |
| jvndb-2020-000067 | OS command injection vulnerability in multiple ELECOM LAN routers | 2020-10-05T15:33+09:00 | 2020-10-05T15:33+09:00 |
| jvndb-2020-000066 | InfoCage SiteShell installs their files with improper access permissions | 2020-09-30T15:37+09:00 | 2020-09-30T15:37+09:00 |
| jvndb-2020-008821 | CMONOS.JP vulnerable to cross-site scripting | 2020-09-28T18:10+09:00 | 2020-09-28T18:10+09:00 |
| jvndb-2020-008762 | ServerProtect for Linux vulnerable to OS command injection | 2020-09-28T15:52+09:00 | 2020-09-28T15:52+09:00 |
| jvndb-2020-000064 | Multiple vulnerabilities in Active Update function implemented in multiple Trend Micro products | 2020-09-23T15:26+09:00 | 2020-09-23T15:26+09:00 |
| jvndb-2020-000065 | Multiple access restriction bypass vulnerabilities in UNIQLO App | 2020-09-17T14:41+09:00 | 2020-09-17T14:41+09:00 |
| jvndb-2020-000063 | Multiple vulnerabilities in Buffalo AirStation WHR-G54S | 2020-09-11T15:57+09:00 | 2020-09-11T15:57+09:00 |
| jvndb-2020-000062 | Yodobashi App for Android fails to restrict access permissions | 2020-09-07T14:24+09:00 | 2020-09-07T14:24+09:00 |
| jvndb-2020-000059 | CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to XML external entity injection (XXE) | 2020-08-31T15:10+09:00 | 2020-08-31T15:10+09:00 |
| jvndb-2020-000060 | "Shadankun Server Security Type" vulnerable to denial-of-service (DoS) | 2020-08-31T14:41+09:00 | 2020-08-31T14:41+09:00 |
| jvndb-2020-000056 | Multiple NETGEAR switching hubs vulnerable to cross-site request forgery | 2020-08-28T15:33+09:00 | 2020-08-28T15:33+09:00 |
| jvndb-2020-000058 | Multiple vulnerabilities in XOOPS module "XooNIps" | 2020-08-27T15:37+09:00 | 2020-08-27T15:37+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1127 | Multiples vulnérabilités dans Centreon Web | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1126 | Multiples vulnérabilités dans PHP | 2025-12-19T00:00:00.000000 | 2025-12-22T00:00:00.000000 |
| certfr-2025-avi-1125 | Vulnérabilité dans les produits NetApp | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1124 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1123 | Multiples vulnérabilités dans les produits Elastic | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1122 | Multiples vulnérabilités dans Mattermost Server | 2025-12-18T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2025-avi-1121 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1120 | Vulnérabilité dans les produits Cisco | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1111 | Multiples vulnérabilités dans Roundcube | 2025-12-15T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2025-avi-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1108 | Multiples vulnérabilités dans les produits IBM | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1107 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1105 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1104 | Vulnérabilité dans Microsoft Windows Admin Center | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1103 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-12T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1102 | Multiples vulnérabilités dans les produits NetApp | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1101 | Multiples vulnérabilités dans les produits Netgate | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1100 | Multiples vulnérabilités dans les produits Atlassian | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1099 | Multiples vulnérabilités dans les produits Mozilla | 2025-12-11T00:00:00.000000 | 2025-12-11T00:00:00.000000 |
| certfr-2025-avi-1098 | Vulnérabilité dans Broadcom Carbon Black Cloud | 2025-12-11T00:00:00.000000 | 2025-12-11T00:00:00.000000 |