63732 matches found
Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017572)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017572 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...
Unity Linux 20.1060e / 20.1070e Security Update: tomcat (UTSA-2026-017511)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017511 advisory. Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances...
Unity Linux 20.1070e Security Update: maven (UTSA-2026-017745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017745 advisory. Apache Maven will follow repositories that are defined in a dependencys Project Object Model pom which may be surprising to some users, resulting in potential risk i...
Exploit for Code Injection in Apache Nifi
CVE-2023-34468 Exploit !GitHub starshttps://img.shields.io...
Exploit for Code Injection in Apache Nifi
CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Remote Code Execu...
CVE-2026-6860 vulnerabilities
Vulnerabilities for packages: apicurio-registry, spark, druid, wildfly, strimzi-kafka-operator, apache-pulsar, keycloak...
GHSA-3G76-F9XQ-8VP6 vulnerabilities
Vulnerabilities for packages: apicurio-registry, spark, druid, wildfly, strimzi-kafka-operator, apache-pulsar, keycloak...
CVE-2026-6722 Use-After-Free in SOAP using Apache map
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node contains duplicate keys,...
CVE-2026-6722
CVE-2026-6722 describes a use-after-free in PHP’s SOAP extension object deduplication. In affected PHP versions (8.2.x before 8.2.31, 8.3.x before 8.3.31, 8.4.x before 8.4.21, and 8.5.x before 8.5.6), the global map stores object pointers without proper reference counting. If an apache:Map node c...
Fixed in Apache Tomcat 9.0.118
Moderate: Security constraints not correctly applied CVE-2026-43515 When multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. This was fixed with commit db919ff9. This issue was reported to the Tomcat securit...
CVE-2026-42027 vulnerabilities
Vulnerabilities for packages: apache-hop, apache-hop-fips, thingsboard...
CVE-2026-40682 vulnerabilities
Vulnerabilities for packages: apache-hop, apache-hop-fips, thingsboard...
GHSA-4V8G-86X5-3VRC vulnerabilities
Vulnerabilities for packages: apache-hop, apache-hop-fips, thingsboard...
GHSA-CX4M-2P55-RW7J vulnerabilities
Vulnerabilities for packages: apache-hop, apache-hop-fips, thingsboard...
GHSA-659W-93R5-9J6M vulnerabilities
Vulnerabilities for packages: apache-hop, apache-hop-fips, thingsboard...
CVE-2026-42440 vulnerabilities
Vulnerabilities for packages: apache-hop, apache-hop-fips, thingsboard...
OESA-2026-2239 pdfbox security update
Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...
OESA-2026-2244 apache-mina security update
Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...
OESA-2026-2245 apache-mina security update
Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...
OESA-2026-2243 apache-mina security update
Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...