Products: 475
    Vulnerabilities: 3932
    Known Exploited: 41
    698
    Critical Level Threats
    1436
    High Level Threats
    1555
    Medium Level Threats
    92
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-120135

    Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default

    Last Modified: Oct 31, 2026
    Published: Oct 31, 2026

    CVE-2026-118636

    Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder

    Last Modified: Oct 31, 2026
    Published: Oct 31, 2026

    CVE-2026-73322

    Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-64618

    Apache Fineract: SQL injection vulnerability in Search API

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-65874

    Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026
    Items Per Page