ROS-20261019-73-0086

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0077

The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261019-73-0076

The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261019-73-0074

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0073

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0090

The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261019-73-0089

The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261019-73-0088

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261019-73-0075

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-12148: Deserialization of Untrusted Data

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java...

PT-2026-117507

Name of the Vulnerable Software and Affected Versions IBM MQ Operator affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This is possible due to unrestricted Java deserialization within the MQ Classes for Java...

ROS-20261019-73-0096

The vulnerability in Java 1.8.0-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0100

The vulnerability in Java-25-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0099

The vulnerability in Java-21-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0097

The vulnerability in Java-11-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

stirling-h2-import-leftover

abraxaslabs.tech · github.com/abraxas ·&...

CLEANSTART-2026-BQ73969 jackson-databind's deserializer for java

Security vulnerability affects the apache-zookeeper package. jackson-databind's deserializer for java...

CLSA-2026-1787219937 java-1.8.0-openjdk: Fix of 11 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 GA. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS enhance TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise enhance...

org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation

A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by providing a specially crafted Java class file. Due to missing attribute length validation during class parsing, processing the file triggers excessive memory allocation, exhausting system resources and crashing the...

org.ow2.asm/asm: OW2 ASM: Denial of Service via uncontrolled recursion in SignatureReader

A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted Java class file containing deeply nested generic type signatures. When the library parses these signatures using the SignatureReader component, uncontrolled recursion exhausts available...