Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
42739
Total
3465
Critical
12744
High
12574
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-77438 | HIGH | 7.5 | Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and … | Aug 27, 2026 |
| CVE-2026-76640 | HIGH | 7.5 | Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to … | Aug 27, 2026 |
| CVE-2026-76639 | HIGH | 8.8 | Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining … | Aug 27, 2026 |
| CVE-2026-75889 | HIGH | 7.7 | Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through … | Aug 27, 2026 |
| CVE-2026-74820 | UNKNOWN | — | ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain … | Aug 27, 2026 |
| CVE-2026-6876 | UNKNOWN | — | ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute … | Aug 27, 2026 |
| CVE-2026-66353 | UNKNOWN | — | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize_value/2 in lib/doggo.ex returned date field values wrapped … | Aug 27, 2026 |
| CVE-2026-65931 | UNKNOWN | — | LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read … | Aug 27, 2026 |
| CVE-2026-59324 | HIGH | 8.2 | When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers (replyChannel, … | Aug 27, 2026 |
| CVE-2026-59322 | MEDIUM | 6.3 | The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into … | Aug 27, 2026 |
| CVE-2026-59321 | MEDIUM | 4.2 | A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts … | Aug 27, 2026 |
| CVE-2026-59320 | MEDIUM | 6.5 | When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default … | Aug 27, 2026 |
| CVE-2026-59319 | MEDIUM | 4.3 | RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear(), and findByTimeRange() in the same class which do … | Aug 27, 2026 |
| CVE-2026-59317 | MEDIUM | 6.5 | DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring … | Aug 27, 2026 |
| CVE-2026-59316 | HIGH | 8.2 | Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request … | Aug 27, 2026 |
| CVE-2026-59315 | MEDIUM | 5.3 | The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 … | Aug 27, 2026 |
| CVE-2026-59314 | UNKNOWN | — | Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. … | Aug 27, 2026 |
| CVE-2026-59313 | UNKNOWN | — | Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 - 7.0.8 Spring Framework … | Aug 27, 2026 |
| CVE-2026-59311 | MEDIUM | 6.8 | A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a … | Aug 27, 2026 |
| CVE-2026-59307 | HIGH | 8.0 | An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring Integration 7.1.0 Spring Integration … | Aug 27, 2026 |
| CVE-2026-59306 | LOW | 3.1 | Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream … | Aug 27, 2026 |
| CVE-2026-59305 | LOW | 3.1 | Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 … | Aug 27, 2026 |
| CVE-2026-59304 | LOW | 3.1 | Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring … | Aug 27, 2026 |
| CVE-2026-59303 | LOW | 3.1 | Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring … | Aug 27, 2026 |
| CVE-2026-59302 | LOW | 3.1 | Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 … | Aug 27, 2026 |