38124 matches found
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...
ch.rasc:embeddedtc (1.13), ch.rasc:embeddedtc-maven-plugin (1.12) +5 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.53)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.13 - ch.rasc:embeddedtc-maven-plugin 1.12 -...
com.github.edgar615:spring-boot-util-jwt (>=0.0.1, <=0.0.2), com.github.edgar615:spring-boot-util-web (>=0.1.0, <=0.1.3) +34 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.37)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.edgar615:spring-boot-util-jwt =0.0.1, =0.1.0, =2.0.0, =3.0.0-rc.2...
com.jalalkiswani:jk-app-web (>=6.2.0, <=6.4.0), com.jalalkiswani:jk-app-webstack (>=6.2.0, <=6.4.0) +9 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.72)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jalalkiswani:jk-app-web =6.2.0, =6.2.0, =6.0.0, =6.0.0, =5.2.5, =5.2.5,...
com.jalalkiswani:jk-app-web (>=6.2.0, <=6.4.0), com.jalalkiswani:jk-app-webstack (>=6.2.0, <=6.4.0) +9 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.72)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jalalkiswani:jk-app-web =6.2.0, =6.2.0, =6.0.0, =6.0.0, =5.2.5, =5.2.5,...
com.jalalkiswani:jk-app-web (>=6.2.0, <=6.4.0), com.jalalkiswani:jk-app-webstack (>=6.2.0, <=6.4.0) +9 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.72)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jalalkiswani:jk-app-web =6.2.0, =6.2.0, =6.0.0, =6.0.0, =5.2.5, =5.2.5,...
org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (8.5.23)
org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...
org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (8.5.23)
org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...
org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (8.5.28)
org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-42498 Source advisory:...
org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (8.5.28)
org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-43513 Source advisory:...
org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.5.28)
org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-43512 Source advisory:...
org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (8.5.23)
org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...
org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.5.28)
org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-41284 Source advisory:...
CVE-2025-43524
An access control error in the Icons component of macOS allows an application to bypass its sandbox due to insufficient restrictions. This vulnerability is addressed in macOS Sequoia 15.7.7 , macOS Sonoma 14.8.7 , and macOS Tahoe 26.2 . Exploitation details are not provided in the documents.
Next.js dynamic-route param injection (CVE-2026-44574)
Probes GHSA-492v-c6pp-mqqv: inbound nxtP / nxtI internal search params plus proxy-style headers can skew App Router params vs middleware pathname; second probe uses %252F in a dynamic segment. Configure sentinel to a string only the protected page renders. !/usr/bin/env python3 -- coding: utf-8 -...
CVE-2026-6808
creationtimestamp| type| source ---|---|--- 2026-05-12 11:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlnowzydrq2g...
Calendar app leaked user identifiers via attendee suggestion endpoint
None...
CVE-2026-6710
The Skysa Text Ticker App plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the SkysaAppsAdminAppPage function. This makes it possible for unauthenticated attackers to trick a site...