25 matches found
SUSE SLES15: java-1_8_0-openjdk / java-1_8_0-openjdk-demo / etc (SUSE-SU-2026:3623-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3623-1 advisory. Security issues fixed: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize...
SUSE-SU-2026:3623-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk fixes the following issues: Security issues fixed: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize bsc1272459. - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data bsc127222...
java-11-openj9-11.0.32.0-1.1 on GA media (moderate)
java-11-openj9-11.0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11485-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47057 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
RHSA-2026:47057 Red Hat Security Advisory: nodejs:24 security update
Bulletin has no description...
Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU
Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...
SUSE SLES12: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:3284-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3284-1 advisory. This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: -...
Debian dla-4702 : openjdk-11-dbg - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4702 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4702-1 [email protected]...
CVE-2026-47057
creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
BELL-CVE-2026-47057
Bulletin has no description...
CVE-2026-47057
A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...
CVE-2026-47057
...
CVE-2026-47057
Vulnerability in Oracle Java SE component: Scripting. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attack...
EUVD-2025-47057
Malicious code in iwan-klentik36-sukiwir npm...
CVE-2025-47057
creationtimestamp| type| source ---|---|--- 2025-06-11 17:34:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18089...
CVE-2025-47057 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
CVE-2024-47057
creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6w3aezt2 2025-05-30 22:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgagqgdxs2r...
CVE-2024-47057
SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames. User Enumeration via Timing Attack: A user enumeration vulnerability exists in the...
CVE-2024-47057
CVE-2024-47057 describes a timing-based user enumeration vulnerability in Mautic’s “Forget your password” flow. Unauthenticated actors can distinguish existing vs. non-existing usernames by response time differences, due to lacking rate limiting, enabling username discovery. Impact is user enumer...
CVE-2021-47057
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dmaiv fails to map In the case where the dmaiv mapping fails, the return error path leaks the memory allocated to object d. Fix this by adding a new error return label and jumpi...