Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Versions

all
21

IBM API Connect V12 OnPremIBM API Connect Default Credentials

Risk 86
Severity
9.8
First published (updated )
CVE-2026-3144

Apache CXFApache CXF: LDAP Injection vulnerability in XKMS LDAP Repository

Risk 92
Severity
9.8
First published (updated )
CVE-2026-44930

Apache TomcatApache Tomcat: Security constraints not correctly applied

Risk 71
Severity
9.1
First published (updated )
CVE-2026-43515

Apache TomcatApache Tomcat: Digest authenticator will authenticate any unknown user

Risk 92
Severity
9.8
First published (updated )
CVE-2026-43512

Apache TomcatApache Tomcat: HTTP/2 request headers not validated

Risk 92
Severity
9.8
First published (updated )
CVE-2026-41293
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/io.netty:netty-codec-dnsNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Risk 66
Severity
9.1
First published (updated )
CVE-2026-42579

Apache MINAApache MINA: CWE-502 Deserialization of Untrusted Data (take 2)

Risk 86
Severity
9.8
First published (updated )
CVE-2026-42778

Apache MINAApache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)

Risk 86
Severity
9.8
First published (updated )
CVE-2026-42779

VMware Spring BootIn certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized ac…

Risk 66
Severity
9.1
First published (updated )
CVE-2026-40976

Apache MINAApache MINA: CWE-502 Deserialization of Untrusted Data

Risk 91
Severity
9.8
First published (updated )
CVE-2026-41409
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache MINAApache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE

Risk 92
Severity
9.8
First published (updated )
CVE-2026-41635

Apache TomcatApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled

Risk 71
Severity
9.1
First published (updated )
CVE-2026-29145

npm/handlebarsHandlebars.js has JavaScript Injection via AST Type Confusion

Risk 61
Severity
9.8
EPSS
0.25%
First published (updated )
CVE-2026-33937

Apache TomcatApache Tomcat: Client certificate verification bypass due to virtual host mapping

Risk 66
Severity
9.1
First published (updated )
CVE-2025-66614

Apache TomcatApache Tomcat: console manipulation via escape sequences in log messages

Risk 87
Severity
9.7
First published (updated )
CVE-2025-55754
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: Bypass of rules in Rewrite Valve

Risk 93
Severity
9.8
First published (updated )
CVE-2025-31651

Apache TomcatApache Tomcat Path Equivalence Vulnerability

Risk 90
Severity
10
Exploited
Zeroday
EPSS
0.04%
First published (updated )
CVE-2025-24813

maven/org.apache.tomcat.embed:tomcat-embed-coreApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

Risk 94
Severity
9.8
First published (updated )
CVE-2024-56337

maven/org.apache.tomcat.embed:tomcat-embed-coreApache Tomcat: RCE due to TOCTOU issue in JSP compilation

Risk 95
Severity
9.8
First published (updated )
CVE-2024-50379

Apache TomcatApache Tomcat: Authentication bypass when using Jakarta Authentication API

Risk 93
Severity
9.8
First published (updated )
CVE-2024-52316
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.springframework:spring-webPivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue i…

Risk 88
Severity
9.8
First published (updated )
CVE-2016-1000027

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203