8 matches found
Security Bulletin: IBM WebSphere Application Server Liberty is affected by an Uncontrolled Resource Consumption vulnerability due to Hibernate Validator 9.1.3.Final (CVE-2026-93879)
Summary There is a vulnerability in the Hibernate Validator 9.1.3.Final library that affects IBM WebSphere Application Server Liberty with the beanValidation-2.0, beanValidation-3.0 or validation-3.1 feature enabled. Vulnerability Details CVEID:CVE-2026-93879 DESCRIPTION: Hibernate Validator coul...
Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
Summary IBM Enterprise Build of Quarkus is affected by the Hibernate Validator vulnerability Vulnerability Details CVEID:CVE-2026-93879 DESCRIPTION: Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper...
Anatomy of an Attack
In today's rapidly evolving cyber threat landscape, organizations face increasingly sophisticated attacks targeting their applications. Understanding these threats and the technologies designed to combat them is crucial. This article delves into the mechanics of a common application attack, using...
Ubuntu 14.04 LTS : Tomcat vulnerabilities (USN-2654-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2654-1 advisory. It was discovered that the Tomcat XML parser incorrectly handled XML External Entities XXE. A remote attacker could possibly use this issue to read...
CVE-2014-7810: Improper Access Control
The Expression Language EL implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanis...
Apache Tomcat 7.0.0 < 7.0.59
The version of Tomcat installed on the remote host is prior to 7.0.59. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.59security-7 advisory. - The Expression Language EL implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before...
Important: Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update
JBoss Enterprise Web Platform 5.2.0, which fixes multiple security issues, various bugs, and adds several enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...
