65429 matches found
Apache CXF < 4.0.4 - Aegis DataBinding SSRF / Local File Read
Apache CXF before 4.0.4, 3.6.3 and 3.5.8 has a Server-Side Request Forgery SSRF vulnerability when using the Aegis DataBinding. The XOP Include mechanism in multipart SOAP requests can be abused to read local files or make server-side HTTP requests to arbitrary URLs. An attacker can use this to...
Apache Tomcat - Remote Code Execution
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted...
PT-2026-67496
Name of the Vulnerable Software and Affected Versions Apache NiFi versions 2.0.0 through 2.10.0 Description Apache NiFi allows the creation, reading, and deletion of Assets associated with Parameter Contexts via the REST API. The framework authorizes asset deletion using the provided Parameter...
📄 Telenia Software TVox 26.5.3 Local Privilege Escalation
Telenia Software TVox versions 26.5.3 and below suffer from a local privilege escalation vulnerability. ------------------------------------------------------------------------------- Telenia Software TVox = 26.5.3 nice Local Privilege Escalation Vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2026-61372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through...
PT-2026-67495
Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.10.0 through 2.10.0 Description A Parameter Context update REST API method fails to enforce authorization checks on components that reference parameter values. While framework authorization was limited to read and write...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41695 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe...
Security Bulletin: IBM Storage Protect for Space Management is vulnerable to denial of service due to Apache Tomcat (CVE-2025-46392)
Summary IBM Storage Protect for Space Management uses Apache Tomcat as part of its web application infrastructure. A vulnerability in Apache Tomcat could allow a remote attacker to trigger excessive resource consumption, leading to a denial of service condition. IBM Storage Protect for Space...
CVE-2026-41843 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-3CHG-M5W7-QFV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-72PG-X5F8-J25J vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-957G-F97V-VPPC vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-CJPG-RGQ5-FR37 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-MQ64-J8F9-9GCJ vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41846 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-X23C-287F-QQV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...