Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

33 matches found

osv_root
osv_root•added 2026/09/15 4:56 p.m.•24 views

ROOT-APP-MAVEN-CVE-2024-38829 CVE-2024-38829 in org.springframework.ldap:spring-ldap-core - Patched by Root

Root has patched CVE-2024-38829 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...

3.7CVSS5.6AI score0.00368EPSS
SaveExploits0
osv_root
osv_root•added 2026/09/15 4:56 p.m.•26 views

ROOT-APP-MAVEN-CVE-2026-41720 CVE-2026-41720 in org.springframework.ldap:spring-ldap-core - Patched by Root

Root has patched CVE-2026-41720 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...

7.4CVSS5.7AI score0.00257EPSS
SaveExploits0
osv_clsa
osv_clsa•added 2026/09/14 3:37 p.m.•19 views

CLSA-2026-1789400252 TuxCare security update for org.springframework.ldap:spring-ldap-core (1 CVE)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.3.3.RELEASE-tuxcare.1...

7.4CVSS5.9AI score0.00257EPSS
SaveExploits0
Positive Technologies
Positive Technologies•added 2026/09/14 12:00 a.m.•8 views

PT-2026-98181

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.3.3.RELEASE-tuxcare.1...

5.9AI score
SaveExploits0References1
osv_clsa
osv_clsa•added 2026/09/11 5:08 p.m.•23 views

CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap:spring-ldap-core (1 CVE)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

7.4CVSS5.9AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•5 views

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=12.1.1), cc.zzzyu.nacos:default-auth-plugin (3.1.1) +134 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.2.0, <=3.2.16)

org.springframework.ldap:spring-ldap-core MAVEN version =3.2.0, =1.0.0.ee-20260424025040, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.11.5 and more Source cves: CVE-2026-41720 Source advisory: GHSA-JRV5-8W28-4265...

7.4CVSS5.9AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•3 views

com.github.ptomli.bedrock:bedrock-core (1.0.0), com.isotrol.impe3.extensions:impe3-pms-ldap (>=3.0.0, <=3.1.1) +167 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (1.3.1.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - com.github.ptomli.bedrock:bedrock-core 1.0.0 -...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•3 views

be.dnsbelgium:rdap-server (>=0.3.3, <=1.1.0), com.daioware.security:security (1.0.0.release) +160 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (1.3.2.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.5.2, =0.3.1, =0.2.0, =0.2.0,...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•3 views

com.erudika:para-jar (>=1.51.2, <=1.51.4), com.erudika:para-server (>=1.51.2, <=1.54.7) +57 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0, <=4.0.3)

org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: GHSA-JRV5-8W28-4265...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•2 views

com.erudika:para-jar (>=1.51.2, <=1.51.4), com.erudika:para-server (>=1.51.2, <=1.54.7) +57 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0, <=4.0.3)

org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•2 views

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=12.1.1), cc.zzzyu.nacos:default-auth-plugin (3.1.1) +134 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.2.0, <=3.2.16)

org.springframework.ldap:spring-ldap-core MAVEN version =3.2.0, =1.0.0.ee-20260424025040, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.11.5 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

7.4CVSS5.9AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•2 views

edu.uiowa.icts.spring:spring-utils (>=2.0.10, <=2.0.11), org.codehaus.fabric3:fabric3-spring-library (>=1.6, <=1.9) +18 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (1.3.0.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - edu.uiowa.icts.spring:spring-utils =2.0.10, =1.6, =1.6, =1.6, =3.4-rc...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•2 views

ai.h2o:h2o-orc-parser (>=3.10.0.5, <=3.10.3.6), cc.chensoul.nacos:core-test (2.5.2) +708 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=2.0.0.release, <=2.4.4)

org.springframework.ldap:spring-ldap-core MAVEN version =2.0.0.release, =3.10.0.5, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.567.22 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•2 views

ai.h2o:h2o-orc-parser (>=3.10.0.5, <=3.10.3.6), cc.chensoul.nacos:core-test (2.5.2) +708 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=2.0.0.release, <=2.4.4)

org.springframework.ldap:spring-ldap-core MAVEN version =2.0.0.release, =3.10.0.5, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.567.22 and more Source cves: CVE-2026-41720 Source advisory: GHSA-JRV5-8W28-4265...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•3 views

com.almis.awe:awe-annotation (>=4.11.6, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.6, <=4.12.0) +74 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.3.0, <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.3.0, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =1.50.7, =1.51.1 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 6:31 a.m.•2 views

com.almis.awe:awe-annotation (>=4.11.6, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.6, <=4.12.0) +74 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.3.0, <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.3.0, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =1.50.7, =1.51.1 and more Source cves: CVE-2026-41720 Source advisory: GHSA-JRV5-8W28-4265...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 3:48 a.m.•3 views

com.erudika:para-jar (>=1.51.2, <=1.51.4), com.erudika:para-server (>=1.51.2, <=1.54.7) +57 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0, <=4.0.3)

org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: MEND:CVE-2026-41720...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/09 3:48 a.m.•4 views

com.almis.awe:awe-annotation (>=4.11.6, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.6, <=4.12.0) +74 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.3.0, <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.3.0, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =1.50.7, =1.51.1 and more Source cves: CVE-2026-41720 Source advisory: MEND:CVE-2026-41720...

7.4CVSS5.8AI score0.00257EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/06/08 12:00 a.m.•3 views

ai.h2o:h2o-orc-parser (>=3.10.0.5, <=3.10.3.6), ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=12.1.1) +305 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=2.4.0, <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =2.4.0, =3.10.0.5, =1.0.0.ee-20260424025040, =1.2.0, =2.1.2 - com.alibaba.ververica:ververica-connector-hive-2.2.0 1.11-vvr-2.1.3 - com.alibaba.ververica:ververica-connector-hive-2.3.6 1.11-vvr-2.1.3 -...

7.4CVSS5.9AI score0.00257EPSS
SaveExploits0
Snyk
Snyk•added 2026/06/08 12:00 a.m.•27 views

Incorrect Implementation of Authentication Algorithm

Overview org.springframework.ldap:spring-ldap-core is a maven plugin for LDAP for Sping. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm via LDAP authentication handling in DirContextAuthenticationStrategy implementations. An attacker can...

8.9CVSS5.7AI score0.00257EPSS
SaveExploits0References2
Rows per page
Query Builder