68289 matches found
Astra Linux – Vulnerability in snappy-java
Snappy-Java is a Java port of the snappy, a fast C++ compressor/decompressor developed by Google. It was found that the SnappyInputStream is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to a lack of a upper bound check on the chunk length, a...
EUVD-2026-102153
Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code...
ai.djl/api: Integer overflow in tensor buffer validation in Deep Java Library
A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...
CVE-2026-102554
A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...
Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition
Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-108104 DESCRIPTION: Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled...
com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0, <=12.1.12)
org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0, =5.0.0, =3.0.0-beta, =12.1.0, =12.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: MEND:CVE-2026-19863...
EUVD-2026-101960
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x DB2 client vertx-db2-client contains DRDA protocol handling code that deserializes User Defined Type UDT column data using a bare ObjectInputStream.readObject call with no ObjectInputFilter or clas...
CVE-2026-102469
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x DB2 client vertx-db2-client contains DRDA protocol handling code that deserializes User Defined Type UDT column data using a bare ObjectInputStream.readObject call with no ObjectInputFilter or clas...
Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition
Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the...
Security update for the Java stack
This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant Updated to version 1.10.18: Security issues fixed: CVE-2021-36374: Fixed excessive memory allocation when readin...
SUSE-SU-2026:4677-1 Security update for the Java stack
This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant Updated to version 1.10.18: - Security issues fixed: - CVE-2021-36374: Fixed excessive memory allocation when...
Vulnerability in Cosminexus
Overview Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java contain the vulnerability. This vulnerability exists in Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java which are components of other Hitachi products. Impact Regarding the impact of the...
Multiple Vulnerabilities in Cosminexus
Overview Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java contain the vulnerabilities. The vulnerabilities exist in Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java which are components of other Hitachi products. Impact Regarding the impact of t...
Multiple Vulnerabilities in Cosminexus
Overview Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java contain the vulnerabilities. The vulnerabilities exist in Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java which are components of other Hitachi products. Impact Regarding the impact of t...
CLEANSTART-2026-OH67049 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
CLEANSTART-2026-AL15636 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
CVE-2026-82458 affects multiple packages. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. See references for individual vulnerabilit...
CLEANSTART-2026-TG95490 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
CLEANSTART-2026-DZ14042 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...