Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

IBM Engineering Requirements Management DOORS and DOORS Web AccessIBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities

Risk 43
Severity
7.5
First published (updated )
CVE-2024-25039

VMware Spring FrameworkSpring Framework Cross-site Scripting via JavaScriptUtils

Risk 47
Severity
7.1
First published (updated )
CVE-2026-41845

Apache ActiveMQApache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default

Risk 84
Severity
8.8
First published (updated )
CVE-2026-49157

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass

Risk 84
Severity
8.8
First published (updated )
CVE-2026-45505

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

Risk 64
Severity
8.1
First published (updated )
CVE-2026-42588
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: LockOutRealm treats user names as case-sensitive

Risk 46
Severity
7.5
First published (updated )
CVE-2026-43513

Apache TomcatApache Tomcat: WebSocket authentication header exposure

Risk 55
Severity
7.3
First published (updated )
CVE-2026-42498

Apache TomcatApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Risk 46
Severity
7.5
First published (updated )
CVE-2026-41284

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia

Risk 84
Severity
8.8
First published (updated )
CVE-2026-41044

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI

Risk 84
Severity
8.8
First published (updated )
CVE-2026-40466
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Oracle JREInfoleak, XEE

Risk 43
Severity
7.5
First published (updated )
CVE-2026-22016

Apache TomcatApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34487

Apache TomcatApache Tomcat: Incomplete escaping of JSON access logs

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34483

Apache TomcatApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

Risk 47
Severity
7.5
First published (updated )
CVE-2026-29146

Apache TomcatApache Tomcat: Request smuggling via invalid chunk extension

Risk 46
Severity
7.5
First published (updated )
CVE-2026-24880
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.apache.activemq:apache-activemqApache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM

Risk 47
Severity
7.5
First published (updated )
CVE-2026-39304

IBM Engineering Requirements Management DOORS and DOORS Web AccessApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40046

Apache ActiveMQApache ActiveMQ Improper Input Validation Vulnerability

Risk 95
Severity
8.8
Exploited
First published (updated )
CVE-2026-34197

Apache ZookeeperApache ZooKeeper: Sensitive information disclosure in client configuration handling

Risk 47
Severity
7.5
First published (updated )
CVE-2026-24308

Apache ZookeeperApache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Risk 61
Severity
7.4
First published (updated )
CVE-2026-24281
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Risk 31
Severity
7.5
EPSS
0.02%
First published (updated )
CVE-2026-24734

IBM Engineering Requirements Management DOORS and DOORS Web Accesslibexpat 2.7.4 fixes CVE-2026-24515 and CVE-2026-25210

Risk 53
Severity
7.8
EPSS
0.01%
First published (updated )
CVE-2026-25210

Oracle JDKJava SE is vulnerable to a denial of service, caused by an easily exploitable vulnerability issue th…

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2026-21945

Oracle JDKDesktop.browse() will run a program if the URI is a filename while the documentation says that the d…

Risk 30
Severity
7.4
EPSS
0.03%
First published (updated )
CVE-2026-21932

Apache TomcatApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

Risk 76
Severity
7.5
First published (updated )
CVE-2025-55752
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

F5 BIG-IPlibexpat 2.7.2 fixes CVE-2025-59375 (DoS, CWE-770)

Risk 48
Severity
7.5
First published (updated )
CVE-2025-59375

Apache TomcatApache Tomcat: DoS via integer overflow in multipart file upload

Risk 47
Severity
7.5
First published (updated )
CVE-2025-52520

Oracle JREThe original fix for CVE-2025-30749 was found to be incomplete. In particular, the CGGlyphImages_Get…

Risk 75
Severity
8.1
First published (updated )
CVE-2025-50106

Oracle JRESeveral scenarios of heap corruption were observed for Graphics2D.drawString(String,float,float) wit…

Risk 75
Severity
8.1
First published (updated )
CVE-2025-30749

IBM Engineering Requirements Management DOORS and DOORS Web Accessjackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

Risk 33
Severity
8.7
EPSS
0.05%
First published (updated )
CVE-2025-52999
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203