Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47857
Affects io.projectreactor:reactor-core | Versions [,3.8.7)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47887
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • C
Arbitrary Code InjectionCVE-2026-47884
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webflux | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webmvc | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Sensitive Cookie in HTTPS Session Without "Secure" AttributeCVE-2026-47889
Affects org.springframework:spring-web | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-59281
Affects org.springframework:spring-web | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47885
Affects org.springframework:spring-web | Versions [6.1.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
HTTP Response SplittingCVE-2026-59314
Affects org.springframework:spring-web | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59283
Affects org.springframework:spring-expression | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47886
Affects org.springframework:spring-expression | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59282
Affects org.springframework:spring-beans | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Directory TraversalCVE-2026-47862
Affects org.springframework.integration:spring-integration-zip | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • L
Race ConditionCVE-2026-59321
Affects org.springframework.integration:spring-integration-scripting | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Cleartext Transmission of Sensitive InformationCVE-2026-59293
Affects org.springframework.integration:spring-integration-smb | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Symlink AttackCVE-2026-59311
Affects org.springframework.integration:spring-integration-zip | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-59274
Affects org.springframework.integration:spring-integration-zip | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • C
Improper AuthenticationCVE-2026-53561
Affects org.apache.hive:hive-service | Versions [,4.2.1)
Has fix
MavenPublished 25 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-54050
Affects org.sakaiproject.profile2:profile2-api | Versions [23.0,]
Has fix
MavenPublished 25 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-54050
Affects org.sakaiproject.profile2:profile2-impl | Versions [23.0,]
Has fix
MavenPublished 25 Aug 2026
  • M
Arbitrary Code InjectionCVE-2026-49845
Affects org.apache.hive:hive-standalone-metastore-server | Versions [,4.2.1)
Has fix
MavenPublished 25 Aug 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-55976
Affects org.apache.hive:hive-common | Versions [,4.2.1)
Has fix
MavenPublished 25 Aug 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-55976
Affects org.apache.hive:hive-exec | Versions [,4.2.1)
Has fix
MavenPublished 25 Aug 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-77310
Affects tools.jackson.core:jackson-databind | Versions [3.0.0, 3.1.5)[3.2.0, 3.2.1)
Has fix
MavenPublished 25 Aug 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-77310
Affects com.fasterxml.jackson.core:jackson-databind | Versions [2.0.0, 2.18.9)[2.19.0, 2.21.5)[2.22.0, 2.22.1)
Has fix
MavenPublished 25 Aug 2026
  • M
Improper NeutralizationCVE-2026-76816
Affects io.netty:netty-codec-mqtt | Versions [,4.1.137.Final)[4.2.0.Final, 4.2.17.Final)
Has fix
MavenPublished 25 Aug 2026
  • H
Missing Release of Memory after Effective LifetimeCVE-2026-59295
Affects io.micrometer:micrometer-core | Versions [,1.16.7)[1.17.0.1,1.17.1)
Has fix
MavenPublished 25 Aug 2026
  • H
Use of Non-Canonical URL Paths for Authorization DecisionsCVE-2026-15573
Affects org.keycloak:keycloak-common | Versions [,26.7.1)
Has fix
MavenPublished 24 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-16102
Affects org.keycloak:keycloak-core | Versions [,26.7.1)
Has fix
MavenPublished 24 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-16102
Affects org.keycloak:keycloak-services | Versions [,26.7.1)
Has fix
MavenPublished 24 Aug 2026