云虫漏洞情报：CVE 自动同步更新。

搜索

• CVE-2026-74820 [未知] CVE-2026-74820 - ServiceNow has remediated a SQL injection vulnerability that was identifi… (CVE) 2026-08-27
• CVE-2026-6876 [未知] CVE-2026-6876 - ServiceNow has remediated a sandbox escape security issue that was identif… (CVE) 2026-08-27
• CVE-2026-66353 [未知] CVE-2026-66353 - Improper Neutralization of Input During Web Page Generation ('Cross-site … (CVE) 2026-08-27
• CVE-2026-65931 [未知] CVE-2026-65931 - LimeSurvey Community Edition 7.0.5 contains an authenticated improper aut… (CVE) 2026-08-27
• CVE-2026-59324 [高危] CVE-2026-59324 - When an IntegrationFlow uses .fluxTransform() with an asynchronous/reorde… (CVE) 2026-08-27
• CVE-2026-59322 [中危] CVE-2026-59322 - The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive hea… (CVE) 2026-08-27
• CVE-2026-59321 [中危] CVE-2026-59321 - A single ScriptEngine instance is reused for every message on a script-ba… (CVE) 2026-08-27
• CVE-2026-59320 [中危] CVE-2026-59320 - When a container-level ErrorHandler is configured (the mitigation for fin… (CVE) 2026-08-27
• CVE-2026-59319 [中危] CVE-2026-59319 - RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text… (CVE) 2026-08-27
• CVE-2026-59317 [中危] CVE-2026-59317 - DeadLetterPublishingRecovererFactory reads the retry_topic-original-times… (CVE) 2026-08-27
• CVE-2026-59316 [高危] CVE-2026-59316 - Spring Authorization Server's default consent page renders user-controlle… (CVE) 2026-08-27
• CVE-2026-59315 [中危] CVE-2026-59315 - The Spring Cloud Config Monitor is susceptible to Denial of Service attac… (CVE) 2026-08-27
• CVE-2026-59314 [未知] CVE-2026-59314 - Applications that build a Content-Disposition header value from untrusted… (CVE) 2026-08-27
• CVE-2026-59313 [未知] CVE-2026-59313 - Spring MVC applications using the functional web framework are vulnerable… (CVE) 2026-08-27
• CVE-2026-59311 [中危] CVE-2026-59311 - A local unprivileged user on the same host can redirect all Zip/UnZip tra… (CVE) 2026-08-27
• CVE-2026-59307 [高危] CVE-2026-59307 - An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restric… (CVE) 2026-08-27
• CVE-2026-59306 [低危] CVE-2026-59306 - Potential for deserialization of untrusted types in Spring Cloud Stream. … (CVE) 2026-08-27
• CVE-2026-59305 [低危] CVE-2026-59305 - Partition interceptor may be improperly added while sending message. Spri… (CVE) 2026-08-27
• CVE-2026-59304 [低危] CVE-2026-59304 - Improper caching of the original content type in Spring Cloud Stream Avro… (CVE) 2026-08-27
• CVE-2026-59303 [低危] CVE-2026-59303 - Dynamic destination cache size is not properly bound in Spring Cloud Stre… (CVE) 2026-08-27