318766 matches found
cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File
cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File...
cve-2026-47878 - MEDIUM - Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist
cve-2026-47878 - MEDIUM - Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist...
cve-2026-47884 - MEDIUM - Spring Framework Improper Path Limitation in XsltView
cve-2026-47884 - MEDIUM - Spring Framework Improper Path Limitation in XsltView...
cve-2026-47885 - MEDIUM - Spring Framework maxPartSize Ignored in PartEventHttpMessageReader
cve-2026-47885 - MEDIUM - Spring Framework maxPartSize Ignored in PartEventHttpMessageReader...
cve-2026-47886 - MEDIUM - Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions
cve-2026-47886 - MEDIUM - Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions...
The Software Supply Chain As a Market for Lemons: A Multivocal Review of Trust Signal Collapse
Practitioners evaluating open-source dependencies rely on cheap trust signals, e.g., stars, download counts, and contributor activity, as substitutes for direct code inspection, assuming those signals reflect genuine trustworthiness. Prior work has documented individual signal gaming, but the...
cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting XSS...
cve-2026-59282 - MEDIUM - Spring Framework Denial of Service via Unbounded List Growth in Data Binding
cve-2026-59282 - MEDIUM - Spring Framework Denial of Service via Unbounded List Growth in Data Binding...
MINI-MH3H-3VPQ-MC63
Bulletin has no description...
MINI-HX4G-49GM-5X88
Bulletin has no description...
MINI-GCX2-Q9MJ-PP6Q
Bulletin has no description...
MINI-4J79-37PV-PM65
Bulletin has no description...
MINI-5MVX-93C4-FJ2J
Bulletin has no description...
CVE-2026-71050
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71042
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7onbflmq2u...
41 deceptive download sites show a real link, then send you somewhere else
We identified a network of 41 websites impersonating popular games and Windows software, all designed to push visitors towards the same Download Studio installer. The sites advertise everything from Counter-Strike, Half-Life, Fallout, Roblox, PUBG, and The Witcher to VLC, 7-Zip, Paint.NET, VMware...
EUVD-2026-62669
A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...
CVE-2026-70903
creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu36huwavn2y...
CVE-2026-70928
creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2ioj3vbb2u...