Lucene search
+L

63970 matches found

RedHat Linux
RedHat Linux
added 2 days ago5 views

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

7.3CVSS5.4AI score0.00178EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2 days ago3 views

camel-jms: Apache Camel JMS components: Arbitrary Exchange state injection

A flaw was found in Apache Camel JMS components. A remote attacker can exploit a deserialization vulnerability by sending a specially crafted ObjectMessage to a queue or topic consumed by an affected Camel application. This bypasses existing security checks, allowing the attacker to inject...

7.3CVSS5.7AI score0.00617EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2 days ago3 views

org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers

A flaw was found in the Apache Camel Mail Component. This vulnerability, due to improper input validation, allows a remote attacker to exploit routes that channel untrusted input into the mail producer without proper header stripping. Before version 4.19.0, this could lead to the redirection of...

3.7CVSS5.3AI score0.00391EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2 days ago3 views

org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size...

7.5CVSS5.3AI score0.00587EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago6 views

org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data

A flaw was found in the camel-vertx-http component of Apache Camel. This vulnerability, a Deserialization of Untrusted Data, could allow a remote attacker to execute arbitrary code. By controlling the backend server or acting as a man-in-the-middle, an attacker could send a specially crafted...

8.1CVSS6.7AI score0.00879EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2 days ago2 views

org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation

A flaw was found in the Apache Camel CXF SOAP component. A remote attacker can exploit this vulnerability by manipulating the operationName header in an unauthenticated HTTP request. This improper input validation allows the attacker to force the CxfProducer to invoke unintended SOAP operations o...

7.5CVSS5.5AI score0.00396EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2 days ago2 views

camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure

A flaw was found in the Apache Camel Vertx Websocket component. This vulnerability allows an unauthenticated remote attacker to inject malicious query parameters into a WebSocket connection. This can lead to Server-Side Request Forgery SSRF, where the server is coerced into making requests to...

7.5CVSS5.6AI score0.00783EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2 days ago4 views

commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input

A flaw was found in Apache Commons Configuration. When processing an untrusted configuration file, a remote attacker could provide specially crafted YAML input with cycles. This could lead to an uncontrolled recursion, causing a StackOverflowError and resulting in a Denial of Service DoS for the...

5.3CVSS5.4AI score0.00469EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago4 views

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.3 for Spring Boot release.

Red Hat build of Apache Camel 4.18.3 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS6.4AI score0.00879EPSS
SaveExploits14References26
Cvelist
Cvelist
added 2 days ago34 views

CVE-2026-66256 Apache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API)

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...

0.00522EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago4 views

CVE-2026-66256

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...

6.1AI score0.00522EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago23 views

CVE-2026-66256

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-66256.

7.2CVSS6.1AI score0.00522EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-57918

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...

7.2CVSS6.1AI score0.00522EPSS
SaveExploits0References1
OSV
OSV
added 2 days ago4 views

CLEANSTART-2026-HW70472 Security fixes in activemq 5.19.8-r3

Package activemq version 5.19.8-r3 fixes 29 vulnerabilities: CVE-2016-1000027, CVE-2024-38816, CVE-2024-38819, CVE-2024-38820, CVE-2024-38827...

9.8CVSS7.8AI score0.54862EPSS
SaveExploits14References1
OSV
OSV
added 2 days ago3 views

CLEANSTART-2026-KQ29054 Security fixes in confluent-kafka 8.3.0-r1

Package confluent-kafka version 8.3.0-r1 fixes 14 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517...

8.1CVSS7.3AI score0.00779EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2 days ago15 views

CVE-Apache-Ecosystem

Apache Ecosystem CVE Vulnerability Reproduction Testbed D...

9.8CVSS7.9AI score0.99992EPSS
SaveExploits305
Veracode
Veracode
added 2 days ago4 views

Insufficient Session Expiration

Apache Camel Keycloak Component is vulnerable to Insufficient Session Expiration. The vulnerability is due to KeycloakSecurityHelper.parseAndVerifyAccessToken omitting the TokenVerifier.ISACTIVE check, allowing expired or not-yet-valid access tokens to pass signature, subject, and issuer validati...

9.8CVSS5.3AI score0.00426EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2 days ago5 views

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered CometD client-supplied headers being copied directly into the Camel Exchange, which allows an attacker to inject Camel control headers and manipulate downstream producers such as HTTP, file, or JMS...

9.8CVSS5.3AI score0.00706EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
added 2 days ago7 views

Denial Of Service (DoS)

Apache ActiveMQ is vulnerable to a Memory Allocation with Excessive Size Value vulnerability. The vulnerability is due to improper handling of non-terminating STOMP header bytes, which allows an unauthenticated attacker to send an excessive amount of header data over a STOMP NIO connection, causi...

7.5CVSS5.5AI score0.00544EPSS
SaveExploits0References4Affected Software3
Veracode
Veracode
added 2 days ago4 views

Input Validation Vulnerability

Apache Camel Mail Component is vulnerable to Improper Input Validation and Exposure of Sensitive Information to an Unauthorized Actor. The vulnerability is due to the MailProducer accepting attacker-controlled mail.smtp. and mail.smtps. headers, allowing untrusted input to override mail session...

3.7CVSS5.2AI score0.00391EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder