CVE-2026-79715

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are vulnerable to a path traversal vulnerability (CWE-22 ). A local attacker can use a specially crafted application archive to traverse directories and write files outside the intended directory. This issue also affect...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...

EUVD-2013-3943

Malware in sbrugna...

GHSA-R936-GWX5-V52F Spring Framework MVC Applications Path Traversal Vulnerability

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

Oracle Business Intelligence Enterprise Edition (OAS) (Apr 2023 CPU)

The versions of Oracle Business Intelligence Enterprise Edition OBIEE OAS installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics componen...

CVE-2021-32588

A use of hard-coded credentials CWE-798 vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x may allow a remote and unauthenticated attacker to execute unauthorized commands as root by uploading and deploying malicious web application...

PT-2013-4788

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.0.0.x before 8.0.0.1 CF09 Description The issue allows remote authenticated users to modify data or cause a denial of service. This is possible because administrative privileges are not required for Portal...

CVE-2013-4012: Undefined Security Weakness

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive PAA file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...