CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

CVE-2025-15554

creationtimestamp| type| source ---|---|--- 2026-04-07 01:16:43+00:00| published-proof-of-concept| Telegram/NRb0QMHrG2YdeQFhFIBC199wVAoJ1DSSMrQ5jp3E6gcHNig...

CVE-2019-15554

CVE-2019-15554 affects the Rust smallvec crate prior to 0.6.10. The issue is memory corruption when grow is called on a spilled SmallVec with a value smaller than current capacity, with potential to leak memory contents or enable remote code execution per OSV description. No explicit remediation/...

CVE-2019-15554

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...

CVE-2019-15554

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...

CVE-2017-15554

...

CVE-2017-15554

This CVE-2017-15554 entry is rejected/not used and does not represent an active vulnerability.