CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

21833 matches found

vulnersOsv•added 2026/06/01 9:30 p.m.•1 views

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.39.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=6.0.0, <=7.4.5) +184 more potentially affected by CVE-2026-40989 via org.springframework.cloud:spring-cloud-function-context (>=4.3.0, <=4.3.2)

org.springframework.cloud:spring-cloud-function-context MAVEN version =4.3.0, =17.39.0, =6.0.0, =2025.0.0.0, =2025.0.0.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =0.2.0, =0.2.1 - com.github.ggreen:split-json-array-processor 0.0.1 and more Source cves: CVE-2026-40989 Source advisory:...

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 9:30 p.m.•1 views

ch.sbb:spring-cloud-stream-binder-solace (>=8.0.0, <=9.0.2), cn.structured:structure-app-application (>=v2.0.0, <=2.0.1) +205 more potentially affected by CVE-2026-40989 via org.springframework.cloud:spring-cloud-function-context (>=5.0.0, <=5.0.1)

org.springframework.cloud:spring-cloud-function-context MAVEN version =5.0.0, =8.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.1 - cn.structured:structure-audit-application v2.0.0 - cn.structured:structure-audit-infra v2.0.0 - cn.structured:structure-audit-interfaces v2.0.0 -...

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 9:30 p.m.•1 views

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 9:30 p.m.•1 views

cn.herodotus.engine:event-message-spring-boot-starter (>=2.7.11.1, <=2.7.18.final), com.azure.spring:spring-cloud-azure-starter-stream-eventhubs (>=4.8.0, <=4.20.0) +113 more potentially affected by CVE-2026-40989 via org.springframework.cloud:spring-cloud-function-context (>=3.2.10, <=3.2.12)

org.springframework.cloud:spring-cloud-function-context MAVEN version =3.2.10, =2.7.11.1, =4.8.0, =4.8.0, =4.8.0, =4.8.0, =4.8.0, =4.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 - com.findevglobal:spring-cloud-stream-binder-amps 1.0.0 - com.findevglobal:spring-cloud-stream-tracer-a...

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 9:30 p.m.•1 views

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.16.0, <=17.38.0), ch.sbb:spring-cloud-stream-binder-solace (>=5.0.5, <=5.2.0) +356 more potentially affected by CVE-2026-40989 via org.springframework.cloud:spring-cloud-function-context (>=4.2.0, <=4.2.4)

org.springframework.cloud:spring-cloud-function-context MAVEN version =4.2.0, =17.16.0, =5.0.5, =3.5.5.3, =3.4.0.0, =3.5.5.3, =3.5.5.3, =3.4.0.0, =3.4.0.0, =5.19.0, =5.19.0, =5.19.0, =5.19.0, =5.19.0, =5.19.0, =1.16.0,...

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 9:30 p.m.•1 views

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 9:30 p.m.•2 views

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 5:49 p.m.•3 views

ch.sbb:spring-cloud-stream-binder-solace (>=8.0.0, <=9.0.2), cn.structured:structure-app-application (>=v2.0.0, <=2.0.1) +205 more potentially affected by CVE-2026-40990 via org.springframework.cloud:spring-cloud-function-context (>=5.0.0, <=5.0.1)

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 5:49 p.m.•1 views

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.39.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=6.0.0, <=7.4.5) +184 more potentially affected by CVE-2026-40990 via org.springframework.cloud:spring-cloud-function-context (>=4.3.0, <=4.3.2)

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 5:49 p.m.•2 views

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

vulnersOsv•added 2026/06/01 5:49 p.m.•2 views

6.5CVSS5.8AI score0.00282EPSS

SaveExploits0

RedhatCVE•added 2026/06/01 4:03 p.m.•33 views

CVE-2026-7459

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

7.5CVSS5.8AI score0.00583EPSS

SaveExploits1References1

Snyk•added 2026/06/01 10:29 a.m.•20 views

Improper Input Validation

Overview org.apache.activemq:activemq-broker is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Improper Input Validation over the /api/jolokia MBeans interface. A user can execute arbitrary code on the broker's...

8.8CVSS7.4AI score0.15492EPSS

SaveExploits17References2

Snyk•added 2026/06/01 10:29 a.m.•18 views

Improper Input Validation

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Improper Input Validation over the /api/jolokia MBeans interface. A user can execute arbitrary code on the broker's JVM by invoking operations with...

8.8CVSS7.4AI score0.15492EPSS

SaveExploits17References2

Snyk•added 2026/06/01 10:29 a.m.•16 views

Improper Input Validation

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Improper Input Validation through the addNetworkConnector function exposed via the Jolokia JMX-HTTP bridge. An attacker can achieve arbitrary code...

8.6CVSS7.8AI score0.00656EPSS

SaveExploits2References2

Snyk•added 2026/06/01 10:29 a.m.•17 views

Improper Input Validation

Overview org.apache.activemq:activemq-broker is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Improper Input Validation through the addNetworkConnector function exposed via the Jolokia JMX-HTTP bridge. An...

8.6CVSS7.8AI score0.00656EPSS

SaveExploits2References2

Github Security Blog•added 2026/06/01 9:31 a.m.•25 views

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrappers such as masterslave:vm://...,... and static:vm://... incorrectly pass validation allowing bypass o...

8.8CVSS7.5AI score0.15492EPSS

SaveExploits17References4Affected Software3

osv_ghsa•added 2026/06/01 9:31 a.m.•18 views

GHSA-HG6C-8MVR-JQC9 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy...

8.1CVSS7.9AI score0.00656EPSS

SaveExploits2References4

Github Security Blog•added 2026/06/01 9:31 a.m.•21 views

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

8.1CVSS7.9AI score0.00656EPSS

SaveExploits2References4Affected Software3

NVD•added 2026/06/01 9:16 a.m.•72 views

CVE-2026-42588

8.1CVSS0.00656EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by