engeman-web-language-combobox-sqli

Engeman Web = 12.0.0.2 Password Recovery Page Load Unauthenticated SQL Injection Proof of concept for exploitation of the vulnerability described in CVE-2025-8220, which concerns the possibility of SQL Injection during the password recovery page load in the Engeman Web software. Description A...

Eltex SMG bridging gateway Remote Administration Data Compromise

The vulnerability in the WEB interface of the remote administration web interface for the Eltex SMG microprogramming gateways is related to a breach in the data protection mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality and integrity of...

Security Bulletin: eMudhra CA Certificate Compromise (CVE-2026-91403 and CVE-2026-114820)

Summary Private keys for eight eMudhra intermediate CA certificates have been compromised. IBM® SDK, Java™ Technology Edition ships a root certificate that chains to the compromised intermediate certificates, so the compromised intermediate certificates are trusted by default. Vulnerability Detai...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL:...

Google Chrome NFC Data Compromise

The NFC component vulnerability in Google Chrome’s web browser is related to authorization errors. Exploiting this vulnerability enables a remote attacker to gain access to protected information and compromise its integrity by using a specially crafted HTML page...

Safebrowsing Component Data Compromise

The Safebrowsing component vulnerability in Google Chrome is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information and compromise its integrity...

Security Bulletin: eMudhra CA Certificate Compromise (CVE-2026-91403 and CVE-2026-114820)

Summary Private keys for eight eMudhra intermediate CA certificates have been compromised. All versions of IBM® Semeru Runtimes are affected. Vulnerability Details CVEID:CVE-2026-114820 DESCRIPTION: Vulnerability in Java SE component: JSSE. Easily exploitable vulnerability allows unauthenticated...

Go net/http Data Compromise

The vulnerability in the Go programming language’s net/http package is related to flaws in HTTP request processing. Exploiting this vulnerability enables a remote attacker to compromise the confidentiality of protected information...

Go net/http Data Compromise

The vulnerability in the Go programming language’s net/http and net/http/httputil packages is related to flaws in HTTP request processing. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality of protected information...

Logstash 8.12.1 < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Multiple Vulnerabilities (ESA-2026-228)

The version of Logstash installed on the remote host is 8.12.1 or later prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-228 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for...

Elasticsearch 8.12.1 < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Multiple Vulnerabilities (ESA-2026-227)

The version of Elasticsearch installed on the remote host is 8.12.1 or later prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-227 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM...

LibSoup HTTP Access Information Disclosure

The vulnerability in the LibSoup library for accessing HTTP servers involves the transmission of protected information in unencrypted form. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information and compromise its integrity...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Views component of Google Chrome and Microsoft Edge is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availability of protected information by using a...

Important: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

Amazon Linux 2023 : java-1.8.0-amazon-corretto, java-1.8.0-amazon-corretto-devel (ALAS2023-2026-3373)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3373 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Amazon Linux 2023 : java-27-amazon-corretto, java-27-amazon-corretto-devel, java-27-amazon-corretto-headless (ALAS2023-2026-3368)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3368 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

Amazon Linux 2 : java-17-amazon-corretto (ALAS-2026-4066)

The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.21.0.11-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4066 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2026-027)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0512.b09-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2CORRETTO8-2026-027 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2026-4067)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.33.0.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4067 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...