A Remote Code Execution Vulnerability found in the Spring Framework. Upgrade it now!Security Affairs·Apr 6, 12:50 UTC · Apr 6, 2018VulnerabilityCVE-2018-1270CVE-2018-1271CVE-2018-127260
Remote Execution Flaw Threatens Apps Built Using Spring Framework — Patch NowThe Hacker News·Apr 6, 07:58 UTC · Apr 6, 2018VulnerabilityCVE-2018-1270CVE-2018-1271CVE-2018-127260
Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps SecurityThe Hacker News·Mar 31, 15:27 UTC · Mar 31, 2022Vulnerability in the wildCVE-2010-1622CVE-2022-22950CVE-2022-2296360
Spring4Shell (CVE-2022Kaspersky Securelist·Apr 4, 16:42 UTC · Apr 4, 2022Vulnerability in the wildCVE-2022-22965CVE-2022-22963CVE-2010-162260
Spring4Shell: New info and fixes (CVE-2022-22965)Help Net Security·Jun 27, 12:44 UTC · Jun 27, 2023Vulnerability in the wildCVE-2022-22965CVE-2022-2296360
Security Patch Releases for Critical ZeroThe Hacker News·Apr 5, 03:15 UTC · Apr 5, 2022VulnerabilityCVE-2022-2296560
High-Severity Access Control Vulnerability Found in Spring WebFluxInfosecurity Magazine·Aug 9, 16:30 UTC · Aug 9, 2023VulnerabilityCVE-2023-3403460
April 2022 Patch Tuesday forecast: Spring is in the air (and vulnerable)Help Net Security·Apr 14, 05:40 UTC · Apr 14, 2022Vulnerability in the wildCVE-2022-22965CVE-2022-22675CVE-2022-2267460
CISA Warns of Active Exploitation of Critical Spring4Shell VulnerabilityThe Hacker News·Apr 6, 03:27 UTC · Apr 6, 2022Vulnerability in the wildCVE-2022-22965CVE-2022-22674CVE-2022-22675+1 CVEs60
CISA adds Spring4Shell vulnerability, Apple zeroThe Record·Jan 13, 00:00 UTC · Jan 13, 2023Vulnerability in the wildCVE-2022-22965CVE-2022-22675CVE-2022-22674+1 CVEs60
CISA adds Spring4Shell to list of exploited vulnerabilitiesHelp Net Security·Jan 10, 14:38 UTC · Jan 10, 2025Vulnerability in the wildCVE-2022-22965CVE-2021-4422860
Securing modern web apps: A case for framework-aware SASTHelp Net Security·Jul 22, 00:00 UTC · Jul 22, 2019Vulnerability30
No Patch Available Yet for Critical SpringShell BugInfosecurity Magazine·Mar 31, 09:45 UTC · Mar 31, 2022VulnerabilityCVE-2010-162260
A Mirai-based botnet is exploiting the Spring4Shell vulnerabilitySecurity Affairs·Apr 9, 07:45 UTC · Apr 9, 2022Vulnerability in the wildCVE-2022-2296560
Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba CloudThe Hacker News·Apr 22, 09:30 UTC · Apr 22, 2022Vulnerability in the wildCVE-2022-2296560
WhiteSource releases free tool to detect and remediate Spring4Shell vulnerabilityHelp Net Security·Apr 5, 00:00 UTC · Apr 5, 2022VulnerabilityCVE-2022-2296560
Oracle Releases January 2025 Patch to Address 318 Flaws Across Major ProductsThe Hacker News·Jan 22, 13:39 UTC · Jan 22, 2025Vulnerability in the wildCVE-2025-21556CVE-2024-21287CVE-2025-21524+10 CVEs60
Veracode platform enhancements improve developers’ ability to secure software supply chainsHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2022Vulnerability42
Microsoft Patches 67 Vulnerabilities Including WEBDAV ZeroThe Hacker News·Jun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-47966CVE-2025-32713+3 CVEs160
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News·May 18, 17:02 UTC · May 18, 2026VulnerabilityCVE-2026-8043CVE-2026-44277CVE-2026-26083+8 CVEs160
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-27681CVE-2026-34621CVE-2026-34619+7 CVEs60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 BugsThe Hacker News·Sep 11, 08:56 UTC · Sep 11, 2025Vulnerability in the wildCVE-2025-53791CVE-2025-55234CVE-2025-54914+9 CVEs60
H1 2022: Malware and Vulnerability Trends ReportRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2021-34473CVE-2021-34523CVE-2021-31207160
Microsoft August 2025 Patch Tuesday Fixes Kerberos ZeroThe Hacker News·Aug 17, 08:42 UTC · Aug 17, 2025VulnerabilityCVE-2025-53786CVE-2025-53779CVE-2025-53767+9 CVEs60
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps ServerThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+10 CVEs160
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityThe Hacker News·Apr 10, 06:48 UTC · Apr 10, 2025Vulnerability in the wildCVE-2025-29824CVE-2022-24521CVE-2022-37969+15 CVEs60
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS VulnerabilityThe Hacker News·Dec 11, 15:01 UTC · Dec 11, 2024Vulnerability in the wildCVE-2024-49138CVE-2022-24521CVE-2022-37969+6 CVEs60
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows FlawsThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2024Vulnerability in the wildCVE-2024-38014CVE-2024-38217CVE-2024-38226+3 CVEs60
Microsoft Issues Patches for 90 Flaws, Including 10 Critical ZeroThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2024Vulnerability in the wildCVE-2024-38189CVE-2024-38178CVE-2024-38193+13 CVEs160
Microsoft's July Update Patches 143 Flaws, Including Two Actively ExploitedThe Hacker News·Jul 11, 09:02 UTC · Jul 11, 2024Vulnerability in the wildCVE-2024-38080CVE-2024-38112CVE-2024-37985+3 CVEs60
Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical HyperThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024Vulnerability in the wildCVE-2024-21407CVE-2024-21408CVE-2024-21400+9 CVEs60
Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows ZeroThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2024Vulnerability in the wildCVE-2024-21351CVE-2024-21412CVE-2023-36025+9 CVEs160
Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 CriticalThe Hacker News·Jan 10, 04:07 UTC · Jan 10, 2024Vulnerability in the wildCVE-2023-35628CVE-2023-35630CVE-2023-35636+9 CVEs60
Microsoft Releases Patch for Two New Actively Exploited ZeroThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2023Vulnerability in the wildCVE-2023-4863CVE-2023-36761CVE-2023-36802+1 CVEs60
New Go-based Botnet Exploiting Exploiting Dozens of IoT Vulnerabilities to Expand its NetworkThe Hacker News·Jul 20, 03:41 UTC · Jul 20, 2023Vulnerability30
Acunetix 13 web app security scanner comes with many innovationsHelp Net Security·Feb 6, 00:00 UTC · Feb 6, 2020Vulnerability55
Oracle critical patch advisory addresses 284 flaws, 33 criticalSecurity Affairs·Jan 18, 13:15 UTC · Jan 18, 2019VulnerabilityCVE-2016-1000031CVE-2017-5645CVE-2018-11776+3 CVEs60
Log4Shell-like Critical RCE Flaw Discovered in H2 Database ConsoleThe Hacker News·Jan 12, 07:56 UTC · Jan 12, 2022VulnerabilityCVE-2021-4239260
Recovering from a cybersecurity earthquake: The lessons organizations must learnHelp Net Security·May 16, 00:00 UTC · May 16, 2022Vulnerability55