Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1590 matches found

Kitploit
Kitploit•added 2026/10/29 1:01 p.m.•24 views

spring-webmvc5

spring-webmvc5 Fork of spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven Add the following to the dependencies section of your project's pom.xml: io.github.jaloon spring-webmvc5 5.3.39.1...

7.5CVSS7.1AI score0.5604EPSS
SaveExploits8
osv_root
osv_root•added 2026/10/27 3:54 p.m.•58 views

ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

3.1CVSS6.6AI score0.00236EPSS
SaveExploits0
osv_root
osv_root•added 2026/10/27 3:54 p.m.•50 views

ROOT-APP-MAVEN-CVE-2024-38828 CVE-2024-38828 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38828 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

5.3CVSS6.5AI score0.00724EPSS
SaveExploits0
osv_root
osv_root•added 2026/10/27 3:54 p.m.•39 views

ROOT-APP-MAVEN-CVE-2026-22737 CVE-2026-22737 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22737 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

5.9CVSS6.5AI score0.004EPSS
SaveExploits1
osv_root
osv_root•added 2026/10/27 3:54 p.m.•40 views

ROOT-APP-MAVEN-CVE-2025-41242 CVE-2025-41242 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2025-41242 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

5.9CVSS6.5AI score0.02127EPSS
SaveExploits1
osv_root
osv_root•added 2026/10/27 3:54 p.m.•54 views

ROOT-APP-MAVEN-CVE-2023-20860 CVE-2023-20860 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2023-20860 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

7.5CVSS6.5AI score0.03514EPSS
SaveExploits1
osv_root
osv_root•added 2026/10/26 2:30 a.m.•30 views

ROOT-APP-MAVEN-AIKIDO-2024-10351 AIKIDO-2024-10351 in org.springframework:spring-webmvc - Patched by Root

Root has patched AIKIDO-2024-10351 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

5.7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins•added 2026/10/22 8:08 p.m.•14 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Path Traversal, CRLF Injection, and Open Redirect issues in spring-webmvc (CVE-2026-47884, CVE-2026-47887, CVE-2026-47890, CVE-2026-59313)

Summary IBM Watson Speech Services Cartridge is vulnerable to Path Traversal, CRLF Injection, and Open Redirect issues in spring-webmvc. Spring-webmvc is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Detai...

9.8CVSS7AI score0.00605EPSS
SaveExploits0Affected Software1
osv_rhlw
osv_rhlw•added 2026/10/09 8:39 p.m.•7 views

RHLW-2026-67AFC831A93FF9CC Lightwell Security Advisory: spring-webmvc 5.3.18.rhlw-00010

Red Hat Lightwell has released org.springframework:spring-webmvc 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2024-38816, CVE-2024-38819, CVE-2024-38828, CVE-2025-41242, CVE-2026-22735, CVE-2026-22737, CVE-2026-22741, and CVE-2026-22745. CVE-2023-20860: Spring Framework running...

7.5CVSS6.5AI score0.5604EPSS
SaveExploits11References20
Packet Storm
Packet Storm•added 2026/10/09 12:00 a.m.•14 views

Spring WebMVC 5.3.17 Data Binding Remote Code Execution

Spring WebMVC version 5.3.17 on JDK 9+ and Tomcat is vulnerable to data binding remote code execution. The proof of concept rewrites Tomcat access logging to create a JSP command shell. https://packetstorm.news/download/234972...

6.3AI score
SaveExploits0
GithubExploit
GithubExploit•added 2026/10/08 3:44 a.m.•20 views

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell CVE-2022-22965 Vulhub's...

9.8CVSS8.1AI score0.99638EPSS
SaveExploits109
osv_root
osv_root•added 2026/10/05 12:18 p.m.•36 views

ROOT-APP-MAVEN-CVE-2026-22735 CVE-2026-22735 in org.springframework:spring-webflux - Patched by Root

Root has patched CVE-2026-22735 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...

2.6CVSS6.3AI score0.00117EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins•added 2026/09/17 8:40 p.m.•34 views

Security Bulletin: DEV-EXT - spring-webmvc-6.2.19.jar (Publicly disclosed vulnerability found by Scanner)

Summary IBM Db2 Developer Extension is affected by 3 Spring MVC CVEs in spring-webmvc-6.2.19.jar: CVE-2026-47884 — CVSS 9.8 , CVE-2026-47887 — CVSS 6.1 , CVE-2026-47890 — CVSS 9.8 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSR...

9.8CVSS7AI score0.00605EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv•added 2026/08/27 5:58 p.m.•7 views

ai.astraform:remote-domain-conformance-java (0.2.0), ai.astraform:remote-domain-template-java-spring (0.2.0) +4021 more potentially affected by CVE-2026-59313 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.8)

org.springframework:spring-webmvc MAVEN version =7.0.0, =0.1.0, =0.0.1, =0.0.1, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-59313 Source advisory: MEND:CVE-2026-59313...

9.8CVSS7.5AI score0.00564EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/27 6:31 a.m.•3 views

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.0-m2)

org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...

9.8CVSS6.8AI score0.00605EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/27 6:31 a.m.•2 views

capital.scalable:spring-auto-restdocs-core (>=1.0.10, <=1.0.13), cc.catalysts.boot:cat-boot-thymeleaf (>=0.2.13, <=0.2.28) +549 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.3.11.release)

org.springframework:spring-webmvc MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - capital.scalable:spring-auto-restdocs-core =1.0.10, =0.2.13, =1.0.5, =1.0.0, =1.0.0,...

9.8CVSS6.8AI score0.00605EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/27 6:31 a.m.•2 views

ai.astraform:remote-domain-conformance-java (0.2.0), ai.astraform:remote-domain-template-java-spring (0.2.0) +4021 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.8)

org.springframework:spring-webmvc MAVEN version =7.0.0, =0.1.0, =0.0.1, =0.0.1, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-47884 Source advisory: GHSA-PC63-QCMH-9CMG...

9.8CVSS6.8AI score0.00605EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/27 6:31 a.m.•3 views

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +3772 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (>=6.0.0, <=6.0.23)

org.springframework:spring-webmvc MAVEN version =6.0.0, =0.0.22, =0.0.28, =0.0.11, =0.1.0, =4.0.0, =1.5.0.release, =1.5.1.release, =1.5.0.release, =2.1.0.release, =3.0.0, =5.0.0, =5.0.0, =5.0.1 - be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-application 2.12.0 -...

9.8CVSS6.8AI score0.00605EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/27 6:31 a.m.•3 views

org.springframework:spring-webmvc-portlet (2.5.3), org.springframework:spring-webmvc-struts (2.5.3) potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.5.3)

org.springframework:spring-webmvc MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-webmvc-portlet 2.5.3 - org.springframework:spring-webmvc-struts...

9.8CVSS6.8AI score0.00605EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/27 6:31 a.m.•11 views

com.foreach.across.modules:bootstrap-ui-module (2.1.1.release), com.foreach.across.modules:dynamic-forms-module (0.0.2.release) +181 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.3.20.release)

org.springframework:spring-webmvc MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across.modules:bootstrap-ui-module 2.1.1.release -...

9.8CVSS6.8AI score0.00605EPSS
SaveExploits0
Rows per page
Query Builder