CVE-2026-86532

The bundled JAAS login modules leak whether a username exists and compare credentials in a non-constant-time manner. A remote unauthenticated attacker can enumerate valid accounts and may infer credential material through timing analysis. Users are recommended to upgrade to version 10.3.0 or...

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

apache__jspwiki_CVE-2019-10076_2-11-0-M3

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

apache__jspwiki_CVE-2019-10077_2_11_0_M4_fixed

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...