67411 matches found
UBUNTU-CVE-2026-74516
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...
CVE-2026-73632
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
EUVD-2026-59606
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
CVE-2026-73632 Apache Struts: Shared serialization state in the JSON plugin
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
CVE-2026-73632
Apache Struts 7.2.1's JSON plugin shares per-response serialization state across concurrent requests, letting one user observe another's response content. Only the SMD/JSON-RPC interceptor path is affected; it is disabled by default. No in-the-wild exploitation is reported. Upgrade to 7.3.0. See ...
EUVD-2026-59605
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...
CVE-2026-73631
Apache Struts 7.2.1's JSON plugin shares per-request parsing state across concurrent requests, allowing one user's JSON-parsed data to leak into another's session and bypassing configured parsing limits. Affected deployments are those using JSON request body population. Upgrade to Struts 7.3.0. N...
CVE-2026-73631 Apache Struts: Shared parsing state in the JSON plugin
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...
GHSA-3GMF-P6R4-Q8M6 vulnerabilities
Vulnerabilities for packages: geoserver...
MINI-2HXG-MXWF-FC73
Bulletin has no description...
MINI-FQ38-7QX7-8FWF
Bulletin has no description...
MINI-H9WH-G2RX-57C8
Bulletin has no description...
MINI-J4P4-QCH6-R62C
Bulletin has no description...
MINI-943H-Q73P-9P8Q
Bulletin has no description...
MINI-HVP4-V9Q4-RWG6
Bulletin has no description...
MINI-QQ3V-2HFX-J8CH
Bulletin has no description...
MINI-974J-8X3R-G485
Bulletin has no description...
MINI-FQ4W-MW4X-C8VF
Bulletin has no description...