engeman-web-language-combobox-sqli

Engeman Web = 12.0.0.2 Password Recovery Page Load Unauthenticated SQL Injection Proof of concept for exploitation of the vulnerability described in CVE-2025-8220, which concerns the possibility of SQL Injection during the password recovery page load in the Engeman Web software. Description A...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL:...

Amazon Linux 2 : java-17-amazon-corretto (ALAS-2026-4066)

The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.21.0.11-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4066 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

Important: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

Amazon Linux 2023 : java-1.8.0-amazon-corretto, java-1.8.0-amazon-corretto-devel (ALAS2023-2026-3373)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3373 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2026-027)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0512.b09-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2CORRETTO8-2026-027 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2026-4067)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.33.0.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4067 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

Amazon Linux 2023 : java-27-amazon-corretto, java-27-amazon-corretto-devel, java-27-amazon-corretto-headless (ALAS2023-2026-3368)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3368 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Security Bulletin: eMudhra CA Certificate Compromise (CVE-2026-91403 and CVE-2026-114820)

Summary Private keys for eight eMudhra intermediate CA certificates have been compromised. All versions of IBM® Semeru Runtimes are affected. Vulnerability Details CVEID:CVE-2026-114820 DESCRIPTION: Vulnerability in Java SE component: JSSE. Easily exploitable vulnerability allows unauthenticated...

Security Bulletin: eMudhra CA Certificate Compromise (CVE-2026-91403 and CVE-2026-114820)

Summary Private keys for eight eMudhra intermediate CA certificates have been compromised. IBM® SDK, Java™ Technology Edition ships a root certificate that chains to the compromised intermediate certificates, so the compromised intermediate certificates are trusted by default. Vulnerability Detai...

Oracle Java SE Vulnerability (Security Alert CVE-2026-114820)

The version of Java installed on the remote host is prior to 8u511-b33, 11.0.33.0.3, 17.0.21.0.3, 21.0.13.0.3, 25.0.5.0.3, or 27.0.1.0.3. It is, therefore, affected by a vulnerability as referenced in the Oracle Security Alert for CVE-2026-114820. The fixed releases remove the impacted eMudhra ro...

ROS-20261027-73-0090

The vulnerability in the OpenSSH cryptographic protection tool is related to insecure privilege management. Exploitation of this vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

Safebrowsing Component Google Chrome Microsoft Edge Data Compromise

The Safebrowsing component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the UrlFormatting component of Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected data...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to insufficient registration validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML pa...

SiteSettings Component Data Compromise

The vulnerability in the SiteSettings component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The Credential Management component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the FileAPI component of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Edge Data Compromise

The Core component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...