19565 matches found
EUVD-2026-59606
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
CVE-2026-73632 Apache Struts: Shared serialization state in the JSON plugin
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
CVE-2026-73632
Apache Struts 7.2.1's JSON plugin shares per-response serialization state across concurrent requests, letting one user observe another's response content. Only the SMD/JSON-RPC interceptor path is affected; it is disabled by default. No in-the-wild exploitation is reported. Upgrade to 7.3.0. See ...
EUVD-2026-59605
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...
CVE-2026-73631
Apache Struts 7.2.1's JSON plugin shares per-request parsing state across concurrent requests, allowing one user's JSON-parsed data to leak into another's session and bypassing configured parsing limits. Affected deployments are those using JSON request body population. Upgrade to Struts 7.3.0. N...
GHSA-3GMF-P6R4-Q8M6 vulnerabilities
Vulnerabilities for packages: geoserver...
MINI-2HXG-MXWF-FC73
Bulletin has no description...
MINI-H9WH-G2RX-57C8
Bulletin has no description...
MINI-J4P4-QCH6-R62C
Bulletin has no description...
MINI-943H-Q73P-9P8Q
Bulletin has no description...
MINI-QQ3V-2HFX-J8CH
Bulletin has no description...
MINI-974J-8X3R-G485
Bulletin has no description...
MINI-JJRW-2796-P97Q
Bulletin has no description...
MINI-FQ4W-MW4X-C8VF
Bulletin has no description...
MINI-H947-96XV-452R
Bulletin has no description...
MINI-6H7F-QMV6-8R3M
Bulletin has no description...
CVE-2026-72101
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integrity is supposed to zero the remaining space. There was a bug in the code that zeroing didn't work. This commit fixes it...
EUVD-2026-59483
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...