2026

An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker c

Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provid

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions:

Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP

Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection in the br

A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly sp

Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. Affected

Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources.

Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources. A

Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affect

A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerab

IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible

Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username i

In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may

An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the applicati

Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings.

Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media ty

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vul

A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c.

The Product Filter Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'args[f

The jQuery Hover Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Footnote Qualifier ('{{

The jQuery Hover Footnotes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i

The TinyMCE shortcode Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'btnrel' Shortcode Att

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parame

A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function editorMDUpload of the file /adm

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsf

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. The impacted element is an unknown function of the file

A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file

The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all ver

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certai

SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by

The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API (ODP-RFC) are missing c

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker t

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. T

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtai

Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver JAVA (JDBC Test Servlet), an unauthenticate

SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be

Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application l

SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain,

Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform

Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the ren

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exp

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exp

Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to p