527 matches found
text4shell-tools
commons-text-tools Collegamenti rapidi Clicca per trovare: Trova i file .jar di commons-text e le loro versioni Chiamate alle funzioni vulnerabili di commons-text Patch immediata sui file .jar di commons-text per disabilitare i comportamenti vulnerabili Esempio di scansione e patch Panoramica...
ff4j__ff4j_CVE-2022-44262_1-8-13
✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...
nahsra__antisamy_CVE-2022-29577_1-6-6-1
AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 7+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...
nahsra__antisamy_CVE-2017-14735_1-5-6
AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 8+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...
VUL4J-59
jsoup: analizador HTML en Java que da sentido al HTML del mundo real. jsoup es una biblioteca Java para trabajar con HTML del mundo real. Proporciona una API muy conveniente para extraer y manipular datos, utilizando lo mejor de DOM, CSS y métodos similares a jQuery. jsoup implementa la...
LOG4J-CVE-2021-44228
LOG4J-CVE-2021-44228 Log4Shell — also known as CVE-2021-44228 — is a critical vulnerability that enables remote code execution in systems using the Apache Foundation’s Log4j, which is an open-source Java library that is extensively used in commercial and open-source software products and utilitie...
readable-thrift
Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...
CLEANSTART-2026-AJ94302 JLine is a Java library for handling console input
Security vulnerability affects the trino package. JLine is a Java library for handling console input...
CLEANSTART-2026-HM88327 JLine is a Java library for handling console input
CVE-2026-77420 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
CVE-2026-85228
A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...
ROOT-APP-MAVEN-CVE-2026-42581 CVE-2026-42581 in io.netty:netty-codec-http - Patched by Root
Root has patched CVE-2026-42581 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...
DEBIAN-CVE-2026-93994
Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...
DEBIAN-CVE-2026-93996
Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...
CVE-2026-94052
A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...
CVE-2026-93994: Missing Critical Step in Authentication
Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...
CLEANSTART-2026-KE95640 JLine is a Java library for handling console input
CVE-2026-77420 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
CLEANSTART-2026-YI14989 JLine is a Java library for handling console input
CVE-2026-77422 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
CLEANSTART-2026-JE20809 JLine is a Java library for handling console input
CVE-2026-77421 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
SUSE CVE-2026-77423
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...
CVE-2026-77422
A flaw was found in JLine, a Java library for handling console input. The built-in grep command accepts user-controlled regular expressions and automatically wraps them, which can amplify backtracking in the regular expression engine. A remote attacker could exploit this by providing a specially...