Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-41719 Vulnerability in org.springframework.data:spring-data-keyvalue (CVE-2026-41719)
vulnerability in org.springframework.data:spring-data-keyvalue (CVE-2026-41719). Confidential information can be exposed externally.
CVE-2026-41728 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41728)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41728). Data can be tampered with by attackers.
CVE-2026-41729 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41729)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41729). Confidential information can be exposed externally.
CVE-2026-41730 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41730)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41730). Risk of unauthorized operations or information disclosure.
CVE-2026-41837 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837). Risk of unauthorized operations or information disclosure.
CVE-2026-41716 Vulnerability in org.springframework.data:spring-data-commons (CVE-2026-41716)
vulnerability in org.springframework.data:spring-data-commons (CVE-2026-41716). Risk of unauthorized operations or information disclosure.
CVE-2026-41008 Open Redirect in org.springframework.security:spring-security-oauth2-authorization-server (CVE-2026-41008)
vulnerability in org.springframework.security:spring-security-oauth2-authorization-server (CVE-2026-41008). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2026-40991 XXE (XML External Entity) in org.springframework.restdocs:spring-restdocs-webtestclient (CVE-2026-40991)
vulnerability in org.springframework.restdocs:spring-restdocs-webtestclient (CVE-2026-40991). Confidential information can be exposed externally.
CVE-2026-41711 Vulnerability in org.springframework.data:spring-data-commons (CVE-2026-41711)
vulnerability in org.springframework.data:spring-data-commons (CVE-2026-41711). Risk of unauthorized operations or information disclosure.
CVE-2026-41003 Cross-Site Scripting (XSS) in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-41003)
cross-site scripting in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-41003). Confidential information can be exposed externally.
CVE-2026-41696 Vulnerability in org.springframework.data:spring-data-mongodb (CVE-2026-41696)
vulnerability in org.springframework.data:spring-data-mongodb (CVE-2026-41696). Confidential information can be exposed externally.
CVE-2026-41706 Open Redirect in org.springframework.security:spring-security-web (CVE-2026-41706)
vulnerability in org.springframework.security:spring-security-web (CVE-2026-41706). Risk of unauthorized operations or information disclosure.
CVE-2026-41717 Vulnerability in org.springframework.data:spring-data-mongodb (CVE-2026-41717)
vulnerability in org.springframework.data:spring-data-mongodb (CVE-2026-41717). Successful exploitation can lead to full system takeover.
CVE-2026-40988 Vulnerability in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-40988)
vulnerability in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-40988). Risk of unauthorized operations or information disclosure.
CVE-2026-40993 Unsafe Deserialization in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-40993)
vulnerability in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-40993). Data can be tampered with by attackers. Mitigation: upgrade to `7.0.6` or later.
CVE-2026-41694 Vulnerability in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-41694)
vulnerability in org.springframework.security:spring-security-saml2-service-provider (CVE-2026-41694). Risk of unauthorized operations or information disclosure.
CVE-2026-41714 Vulnerability in org.springframework.amqp:spring-amqp (CVE-2026-41714)
vulnerability in org.springframework.amqp:spring-amqp (CVE-2026-41714). Risk of unauthorized operations or information disclosure.
CVE-2026-9753 Vulnerability in mongodb (CVE-2026-9753)
vulnerability in mongodb (CVE-2026-9753). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9754 Vulnerability in mongodb (CVE-2026-9754)
vulnerability in mongodb (CVE-2026-9754). Confidential information can be exposed externally. Mitigation: upgrade to `8.2.10, 8.3.3` or later.
CVE-2026-9743 Vulnerability in mongodb (CVE-2026-9743)
vulnerability in mongodb (CVE-2026-9743). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.24` or later.
CVE-2026-9735 Vulnerability in mongodb (CVE-2026-9735)
vulnerability in mongodb (CVE-2026-9735). Confidential information can be exposed externally. Mitigation: upgrade to `8.3.3` or later.
CVE-2026-9740 Vulnerability in mongodb (CVE-2026-9740)
vulnerability in mongodb (CVE-2026-9740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9746 Vulnerability in mongodb (CVE-2026-9746)
vulnerability in mongodb (CVE-2026-9746). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9742 Vulnerability in mongodb (CVE-2026-9742)
vulnerability in mongodb (CVE-2026-9742). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.2.10, 8.3.3` or later.
CVE-2026-9751 Vulnerability in mongodb (CVE-2026-9751)
vulnerability in mongodb (CVE-2026-9751). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9748 Vulnerability in mongodb (CVE-2026-9748)
vulnerability in mongodb (CVE-2026-9748). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.10, 8.2.10, 8.3.3` or later.
CVE-2026-9752 Vulnerability in mongodb (CVE-2026-9752)
vulnerability in mongodb (CVE-2026-9752). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9750 Vulnerability in mongodb (CVE-2026-9750)
vulnerability in mongodb (CVE-2026-9750). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9741 Vulnerability in mongodb (CVE-2026-9741)
vulnerability in mongodb (CVE-2026-9741). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9747 Vulnerability in mongodb (CVE-2026-9747)
vulnerability in mongodb (CVE-2026-9747). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-9749 Vulnerability in mongodb (CVE-2026-9749)
vulnerability in mongodb (CVE-2026-9749). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
CVE-2026-41695 Vulnerability in org.springframework.data:spring-data-commons (CVE-2026-41695)
vulnerability in org.springframework.data:spring-data-commons (CVE-2026-41695). Risk of unauthorized operations or information disclosure. Exploitable via `GET /things`.
CVE-2026-47902 Vulnerability in adobe (CVE-2026-47902)
vulnerability in adobe (CVE-2026-47902). Risk of unauthorized operations or information disclosure.
CVE-2026-47903 Vulnerability in adobe (CVE-2026-47903)
vulnerability in adobe (CVE-2026-47903). Risk of unauthorized operations or information disclosure.
CVE-2026-47904 Vulnerability in adobe (CVE-2026-47904)
vulnerability in adobe (CVE-2026-47904). Risk of unauthorized operations or information disclosure.
CVE-2026-47905 Vulnerability in adobe (CVE-2026-47905)
vulnerability in adobe (CVE-2026-47905). Risk of unauthorized operations or information disclosure.
CVE-2026-34712 Vulnerability in adobe (CVE-2026-34712)
vulnerability in adobe (CVE-2026-34712). Risk of unauthorized operations or information disclosure.
CVE-2026-34713 Vulnerability in adobe (CVE-2026-34713)
vulnerability in adobe (CVE-2026-34713). Risk of unauthorized operations or information disclosure.
CVE-2026-34711 Vulnerability in adobe (CVE-2026-34711)
vulnerability in adobe (CVE-2026-34711). Risk of unauthorized operations or information disclosure.
CVE-2026-34417 Cross-Site Scripting (XSS) in CVE-2026-34417 (CVE-2026-34417)
cross-site scripting in CVE-2026-34417 (CVE-2026-34417). Risk of unauthorized operations or information disclosure.
CVE-2026-25860 Cross-Site Scripting (XSS) in CVE-2026-25860 (CVE-2026-25860)
cross-site scripting in CVE-2026-25860 (CVE-2026-25860). Risk of unauthorized operations or information disclosure.
CVE-2026-34657 Path Traversal in path-traversal (CVE-2026-34657)
path traversal in path-traversal (CVE-2026-34657). Data can be tampered with by attackers.
CVE-2026-48030 OS Command Injection in pheditor/pheditor (CVE-2026-48030)
OS command injection in pheditor/pheditor (CVE-2026-48030). Successful exploitation can lead to full system takeover. Exploitable via ``command``. Mitigation: upgrade to `2.0.4` or later.
CVE-2026-47767 Vulnerability in symfony/runtime (CVE-2026-47767)
vulnerability in symfony/runtime (CVE-2026-47767). Successful exploitation can lead to full system takeover. Exploitable via ``APP_ENV``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-47938 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-47938)
SSRF in ssrf (CVE-2026-47938). Successful exploitation can lead to full system takeover.
CVE-2026-48303 Authorization Flaw in adobe (CVE-2026-48303)
vulnerability in adobe (CVE-2026-48303). Successful exploitation can lead to full system takeover.
CVE-2026-47931 Vulnerability in adobe (CVE-2026-47931)
vulnerability in adobe (CVE-2026-47931). Successful exploitation can lead to full system takeover.
CVE-2026-47929 Authorization Flaw in adobe (CVE-2026-47929)
vulnerability in adobe (CVE-2026-47929). Successful exploitation can lead to full system takeover.
CVE-2026-47955 Use-After-Free in adobe (CVE-2026-47955)
vulnerability in adobe (CVE-2026-47955). Successful exploitation can lead to full system takeover.
CVE-2026-47952 Vulnerability in adobe (CVE-2026-47952)
vulnerability in adobe (CVE-2026-47952). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →