CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

121 matches found

vulnersOsv•added 2026/06/10 12:31 a.m.•7 views

com.github.binarywang:weixin-java-common (>=3.7.7.b, <=3.9.0), com.github.fangjinuo.agileway:agileway-redis (>=2.0.0, <=3.1.12) +31 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.23.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.binarywang:weixin-java-common =3.7.7.b, =2.0.0,...

6.4CVSS5.4AI score0.00207EPSS

SaveExploits0

vulnersOsv•added 2026/06/09 6:31 a.m.•6 views

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +150 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.5.1)

org.springframework:spring-core MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.2.1, =0.7, =1.3, =2.0, =2.0, =0.0....

7.5CVSS6.6AI score0.00335EPSS

SaveExploits0

Github Security Blog•added 2025/10/20 3:36 a.m.•2 views

Malware in java-common

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score

SaveExploits0References1Affected Software1

Snyk•added 2025/10/20 3:36 a.m.•12 views

Malicious Package

Overview java-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS6.8AI score

SaveExploits0References2

osv_mal•added 2025/10/07 2:42 p.m.•11 views

MAL-2025-48369 Malicious code in java-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 555d7c368b052227256d6f6b35ce4b6d84da939df3127667ff6e73515dbee1bd Any computer that has this package installed or running should be considered...

6.8AI score

SaveExploits0References1

OSSF Malicious Packages•added 2025/10/07 2:42 p.m.•14 views

Malicious code in java-common (npm)

6.8AI score

SaveExploits0References1

vulnersOsv•added 2024/10/18 6:30 a.m.•5 views

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +143 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (2.5.1)

org.springframework:spring-context MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.2.1, =0.7, =1.3, =2.0, =2.0,...

5.3CVSS6.5AI score0.00617EPSS

SaveExploits2

osv_rhsa•added 2024/09/20 1:55 p.m.•27 views

RHSA-2020:0057 Red Hat Security Advisory: rh-java-common-apache-commons-beanutils security update