Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: java Clear

ID	Title	Severity	Tags	Detected
CVE-2026-3505	Vulnerability in CVE-2026-3505 (CVE-2026-3505) vulnerability in CVE-2026-3505 (CVE-2026-3505). Risk of unauthorized operations or information disclosure.	High	Java Cwe 400 Cwe 770	4 months ago
CVE-2026-5598	Vulnerability in org.bouncycastle:bcprov-jdk15to18 (CVE-2026-5598) vulnerability in org.bouncycastle:bcprov-jdk15to18 (CVE-2026-5598). Confidential information can be exposed externally. Mitigation: upgrade to `1.80.2` or later.	High	Java Cwe 385	4 months ago
CVE-2025-14813	Vulnerability in org.bouncycastle:bcprov-jdk14 (CVE-2025-14813) vulnerability in org.bouncycastle:bcprov-jdk14 (CVE-2025-14813). Confidential information can be exposed externally. Exploitable via ``G3413CTRBlockCipher``. Mitigation: upgrade to `1.84` or later.	High	Java Cwe 327	4 months ago
CVE-2026-0636	Vulnerability in CVE-2026-0636 (CVE-2026-0636) vulnerability in CVE-2026-0636 (CVE-2026-0636). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 90	4 months ago
CVE-2026-27674	Code Injection in sap (CVE-2026-27674) code injection in sap (CVE-2026-27674). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 94 Sap Netweaver Application Server Java	4 months ago
CVE-2026-25204	Unsafe Deserialization in dos (CVE-2026-25204) vulnerability in dos (CVE-2026-25204). Risk of unauthorized operations or information disclosure.	Medium	Java Denial of Service Insecure Deserialization Cwe 502 +3	4 months ago
CVE-2026-35568	Vulnerability in lfprojects (CVE-2026-35568) vulnerability in lfprojects (CVE-2026-35568). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.0` or later.	Medium	Java Cwe 346 Lfprojects Mcp Java Sdk	4 months ago
CVE-2026-33439	Unsafe Deserialization in deserialization (CVE-2026-33439) vulnerability in deserialization (CVE-2026-33439). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `16.0.6` or later.	Critical	Java Remote Code Execution Insecure Deserialization Cwe 502 +2	4 months ago
CVE-2026-5736	Vulnerability in sqli (CVE-2026-5736) vulnerability in sqli (CVE-2026-5736). Risk of unauthorized operations or information disclosure.	High	Java SQL Injection Cwe 74 Cwe 89	4 months ago
CVE-2026-35554	Vulnerability in apache (CVE-2026-35554) vulnerability in apache (CVE-2026-35554). Confidential information can be exposed externally.	High	Java Apache Insecure Deserialization Cwe 362 +2	4 months ago
CVE-2025-48651	Vulnerability in google (CVE-2025-48651) vulnerability in google (CVE-2025-48651). Confidential information can be exposed externally.	Medium	Java Cwe 20 Google Android	4 months ago
CVE-2026-0049	Vulnerability in dos (CVE-2026-0049) vulnerability in dos (CVE-2026-0049). Risk of unauthorized operations or information disclosure.	Medium	Java Denial of Service Cwe 400 Google +1	4 months ago
CVE-2026-5616	Authentication Bypass in CVE-2026-5616 (CVE-2026-5616) authentication bypass in CVE-2026-5616 (CVE-2026-5616). Risk of unauthorized operations or information disclosure.	High	Java Cwe 287 Cwe 306	4 months ago
CVE-2026-5535	Path Traversal in path-traversal (CVE-2026-5535) path traversal in path-traversal (CVE-2026-5535). Risk of unauthorized operations or information disclosure.	Medium	Java Path Traversal Cwe 22 Tensoropera +1	4 months ago
CVE-2026-5462	Vulnerability in CVE-2026-5462 (CVE-2026-5462) vulnerability in CVE-2026-5462 (CVE-2026-5462). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5458	Vulnerability in CVE-2026-5458 (CVE-2026-5458) vulnerability in CVE-2026-5458 (CVE-2026-5458). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5456	Vulnerability in CVE-2026-5456 (CVE-2026-5456) vulnerability in CVE-2026-5456 (CVE-2026-5456). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5457	Vulnerability in CVE-2026-5457 (CVE-2026-5457) vulnerability in CVE-2026-5457 (CVE-2026-5457). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5453	Vulnerability in CVE-2026-5453 (CVE-2026-5453) vulnerability in CVE-2026-5453 (CVE-2026-5453). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5452	Vulnerability in CVE-2026-5452 (CVE-2026-5452) vulnerability in CVE-2026-5452 (CVE-2026-5452). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5420	Vulnerability in CVE-2026-5420 (CVE-2026-5420) vulnerability in CVE-2026-5420 (CVE-2026-5420). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 320 Cwe 321	4 months ago
CVE-2026-5418	SSRF (Server-Side Request Forgery) in CVE-2026-5418 (CVE-2026-5418) SSRF in CVE-2026-5418 (CVE-2026-5418). Risk of unauthorized operations or information disclosure.	High	Java Cwe 918	4 months ago
CVE-2026-34360	SSRF (Server-Side Request Forgery) in hapifhir (CVE-2026-34360) SSRF in hapifhir (CVE-2026-34360). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 918 Hapifhir Hl7 Fhir Core	4 months ago
CVE-2026-34361	Vulnerability in hapifhir (CVE-2026-34361) vulnerability in hapifhir (CVE-2026-34361). Confidential information can be exposed externally.	Critical	Java Cwe 552 Hapifhir Hl7 Fhir Core	4 months ago
CVE-2026-34359	Vulnerability in hapifhir (CVE-2026-34359) vulnerability in hapifhir (CVE-2026-34359). Confidential information can be exposed externally.	High	Java Cwe 346 Hapifhir Hl7 Fhir Core	4 months ago
CVE-2026-34237	Vulnerability in io.modelcontextprotocol.sdk:mcp-core (CVE-2026-34237) vulnerability in io.modelcontextprotocol.sdk:mcp-core (CVE-2026-34237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.18.3` or later.	Medium	Java Cwe 942 Lfprojects Mcp Java Sdk	4 months ago
CVE-2026-33728	Unsafe Deserialization in com.datadoghq:dd-java-agent (CVE-2026-33728) vulnerability in com.datadoghq:dd-java-agent (CVE-2026-33728). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.60.3` or later.	Critical	Java Remote Code Execution Cwe 502 Datadog +1	5 months ago
CVE-2026-33701	Unsafe Deserialization in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-33701) vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-33701). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.26.1` or later.	Critical	Java Remote Code Execution Cwe 502 Linuxfoundation +1	5 months ago
CVE-2026-33180	Information Disclosure in CVE-2026-33180 (CVE-2026-33180) vulnerability in CVE-2026-33180 (CVE-2026-33180). Confidential information can be exposed externally.	High	Java Cwe 200 Cwe 201	5 months ago
CVE-2026-29062	Vulnerability in dos (CVE-2026-29062) vulnerability in dos (CVE-2026-29062). Risk of unauthorized operations or information disclosure.	High	Java Denial of Service Cwe 770 Cwe 1284 +2	5 months ago
CVE-2026-0011	Vulnerability in google (CVE-2026-0011) vulnerability in google (CVE-2026-0011). Successful exploitation can lead to full system takeover.	High	Java Cwe 693 Cwe 703 Google +1	5 months ago
CVE-2026-0013	Vulnerability in google (CVE-2026-0013) vulnerability in google (CVE-2026-0013). Successful exploitation can lead to full system takeover.	High	Java Cwe 441 Google Android	5 months ago
CVE-2026-0012	Vulnerability in platform/frameworks/base (CVE-2026-0012) vulnerability in platform/frameworks/base (CVE-2026-0012). Confidential information can be exposed externally. Mitigation: upgrade to `14:2026-03-01` or later.	Medium	Java Cwe 284 Cwe 693 Google +1	5 months ago
CVE-2026-27830	Code Injection in deserialization (CVE-2026-27830) code injection in deserialization (CVE-2026-27830). Successful exploitation can lead to full system takeover. Exploitable via ``javax.naming.Reference``.	High	Java Insecure Deserialization Cwe 94 Cwe 502	6 months ago
CVE-2026-27727	Vulnerability in mchange (CVE-2026-27727) vulnerability in mchange (CVE-2026-27727). Successful exploitation can lead to full system takeover. Exploitable via ``factoryClassLocation``.	Critical	Java Cwe 74 Cwe 502 Mchange +1	6 months ago
CVE-2026-25747	Unsafe Deserialization in apache (CVE-2026-25747) vulnerability in apache (CVE-2026-25747). Successful exploitation can lead to full system takeover.	High	Java Apache Insecure Deserialization Cwe 502 +1	6 months ago
CVE-2026-2141	Vulnerability in 5kcrm (CVE-2026-2141) vulnerability in 5kcrm (CVE-2026-2141). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 266 Cwe 285 Cwe 863 +2	6 months ago
CVE-2025-70974	Vulnerability in CVE-2025-70974 (CVE-2025-70974) vulnerability in CVE-2025-70974 (CVE-2025-70974). Successful exploitation can lead to full system takeover.	Critical	Java Cwe 829	7 months ago
CVE-2025-12543	Vulnerability in redhat (CVE-2025-12543) vulnerability in redhat (CVE-2025-12543). Confidential information can be exposed externally. Exploitable via `Host header`.	Critical	Java Cwe 20 Redhat Build Of Apache Camel +7	7 months ago
CVE-2025-48615	Vulnerability in google (CVE-2025-48615) vulnerability in google (CVE-2025-48615). Successful exploitation can lead to full system takeover.	High	Java Cwe 770 Cwe 400 Google +1	8 months ago
CVE-2025-48612	Vulnerability in google (CVE-2025-48612) vulnerability in google (CVE-2025-48612). Successful exploitation can lead to full system takeover.	High	Java Cwe 20 Google Android	8 months ago
CVE-2025-60828	Unsafe Deserialization in deserialization (CVE-2025-60828) vulnerability in deserialization (CVE-2025-60828). Risk of unauthorized operations or information disclosure.	Medium	Java Insecure Deserialization Cwe 502 5Kcrm +1	10 months ago
CVE-2025-11226	Vulnerability in spring (CVE-2025-11226) vulnerability in spring (CVE-2025-11226). Risk of unauthorized operations or information disclosure.		Java Spring Cwe 20	10 months ago
CVE-2025-55371	Vulnerability in jishenghua (CVE-2025-55371) vulnerability in jishenghua (CVE-2025-55371). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 284 Jishenghua Jsherp	1 year ago
CVE-2025-55366	Vulnerability in privilege-escalation (CVE-2025-55366) vulnerability in privilege-escalation (CVE-2025-55366). Risk of unauthorized operations or information disclosure.	Medium	Java Privilege Escalation Cwe 284 Jishenghua +1	1 year ago
CVE-2025-55367	Vulnerability in jishenghua (CVE-2025-55367) vulnerability in jishenghua (CVE-2025-55367). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 284 Jishenghua Jsherp	1 year ago
CVE-2025-55368	Vulnerability in jishenghua (CVE-2025-55368) vulnerability in jishenghua (CVE-2025-55368). Successful exploitation can lead to full system takeover.	High	Java Cwe 284 Jishenghua Jsherp	1 year ago
CVE-2025-55370	Vulnerability in jishenghua (CVE-2025-55370) vulnerability in jishenghua (CVE-2025-55370). Successful exploitation can lead to full system takeover.	High	Java Cwe 639 Jishenghua Jsherp	1 year ago
CVE-2025-8916	Vulnerability in org.bouncycastle:bcpkix-fips (CVE-2025-8916) vulnerability in org.bouncycastle:bcpkix-fips (CVE-2025-8916). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.8` or later.		Java Cwe 770	1 year ago
CVE-2025-1686	Vulnerability in pebbletemplates (CVE-2025-1686) vulnerability in pebbletemplates (CVE-2025-1686). Confidential information can be exposed externally.	Medium	Java Cwe 73 Pebbletemplates Pebble Templates	1 year ago

Vulnerabilities

🍪 About cookies