64 matches found
Payara Server - Cross-Site Scripting
Payara Server versions 4.1.2.191.54, 5.83.0, 6.34.0, and 7.2026.1 contain a stored XSS vulnerability caused by improper input sanitization in the REST Management Interface. This allows attackers to mislead administrators into changing the admin password via a URL payload; however, the exploit...
CVE-2026-14340
creationtimestamp| type| source ---|---|--- 2026-07-02 12:52:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo354zv2w2w...
CVE-2026-14340
GitHub Enterprise Server (GitHub ES) suffers an incorrect authorization vulnerability (CVE-2026-14340) where a user-to-server token scoped to a GitHub App installation could perform write operations on public repositories outside the token’s scope. The root cause is an authorization check that on...
CVE-2025-14340
creationtimestamp| type| source ---|---|--- 2026-04-10 21:03:08+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67us45ju2p...
org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3), org.glassfish.main.featuresets:debug (>=6.2.5, <=9.0.0-m3) +5 more potentially affected by CVE-2025-14340 via org.glassfish.main.admin:rest-service (>=5.0.1, <=9.0.0-m3)
org.glassfish.main.admin:rest-service MAVEN version =5.0.1, =7.0.16, =6.2.5, =7.1.0-m1, =7.1.0-m1, =5.0.1, =5.0.1, =5.0.1, =9.0.0-m3 Source cves: CVE-2025-14340 Source advisory: SNYK:JAVA-ORGGLASSFISHMAINADMIN-15323111...
Linux Distros Unpatched Vulnerability : CVE-2020-14340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It m...
Linux Distros Unpatched Vulnerability : CVE-2018-14340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuffzlib....
Ubuntu: Security Advisory (USN-3470-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0347)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0344)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0342)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0320)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0343)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0346)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:2412-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
br.unb.erlangms:ems_java (1.0.8.8), com.alejandrohdezma:sbt-mdoc-toc_2.12 (0.1) +462 more potentially affected by CVE-2020-14340 via org.jboss.xnio:xnio-nio (>=3.6.0.final, <=3.7.7.final)
org.jboss.xnio:xnio-nio MAVEN version =3.6.0.final, =4.0.1, =4.0.1, =4.0.1, =4.0.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =1.0.2, =1.0.5 - com.comcast:ip4s-core2.12 1.4.0 - com.comcast:ip4s-core2.13 1.4.0 and more Source cves: CVE-2020-14340 Source advisory: OSV:GHSA-C738-77X8-WMQ5...
asia.990121:message-example (1.0.0), be.yildiz-games:module-webserver-undertow (>=1.1.3, <=1.1.12) +942 more potentially affected by CVE-2020-14340 via org.jboss.xnio:xnio-nio (>=3.8.0.final, <=3.8.1.final)
org.jboss.xnio:xnio-nio MAVEN version =3.8.0.final, =1.1.3, =0.1.0, =20.5.0, =1.0.0, =1.0.0, =1.0.0, =0.0.4-release, =0.0.4-release, =0.0.4-release, =0.0.4-release, =2021.5 and more Source cves: CVE-2020-14340 Source advisory: GHSA-C738-77X8-WMQ5...
CVE-2020-14340
CVE-2020-14340 affects XNIO prior to the fix in RHSA-2020:4246. A file descriptor leak occurs due to growing NIO Selector handles across garbage collection cycles, enabling a denial-of-service condition. Affected: XNIO 3.6.0.Beta1 through 3.8.1.Final. Root cause: leak in file descriptor managemen...
br.unb.erlangms:ems_java (1.0.8.8), com.alejandrohdezma:sbt-mdoc-toc_2.12 (0.1) +462 more potentially affected by CVE-2020-14340 via org.jboss.xnio:xnio-nio (>=3.6.0.final, <=3.7.7.final)
org.jboss.xnio:xnio-nio MAVEN version =3.6.0.final, =4.0.1, =4.0.1, =4.0.1, =4.0.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =1.0.2, =1.0.5 - com.comcast:ip4s-core2.12 1.4.0 - com.comcast:ip4s-core2.13 1.4.0 and more Source cves: CVE-2020-14340 Source advisory: MEND:CVE-2020-14340...
asia.990121:message-example (1.0.0), be.yildiz-games:module-webserver-undertow (>=1.1.3, <=1.1.12) +942 more potentially affected by CVE-2020-14340 via org.jboss.xnio:xnio-nio (>=3.8.0.final, <=3.8.1.final)
org.jboss.xnio:xnio-nio MAVEN version =3.8.0.final, =1.1.3, =0.1.0, =20.5.0, =1.0.0, =1.0.0, =1.0.0, =0.0.4-release, =0.0.4-release, =0.0.4-release, =0.0.4-release, =2021.5 and more Source cves: CVE-2020-14340 Source advisory: MEND:CVE-2020-14340...