114765 matches found
EUVD-2026-77801
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...
CVE-2026-16189 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...
CVE-2026-16189
IBM WebSphere Application Server 9.0 and 8.5 (prior to versions 9.0.5.29 and 8.5.5.31 respectively) allow a remote attacker to inject forged log entries into the server's administrative log. The vulnerability requires no prior authentication but has a high attack complexity, resulting in a CVSS 3...
CVE-2026-16189 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...
EUVD-2026-77800
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...
CVE-2026-16435
IBM WebSphere Application Server versions 9.0 and 8.5 are affected by an authentication bypass vulnerability that occurs when the XD or Intelligent-Management features are in use. The root cause is classified as CWE-650 (Trusting HTTP Permission Methods on the Server Side) , meaning the server in...
CVE-2026-16435 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...
CVE-2026-16435 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...
EUVD-2026-77796
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...
CVE-2026-55091
flat-to-nested (NPM, versions ≥1.1.0, ≤1.1.1) is vulnerable to prototype pollution (CWE-1321) in FlatToNested.prototype.convert (index.js). The function uses attacker-controlled id and parent field values directly as keys in plain objects, so a value of "__proto__" resolves via the prototype chai...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (including Java)
Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB before version 10.6.5 has a sqllex.cc integer overflow issue, which can lead to an application crash...
Astra Linux – Vulnerability in Mariadb 10.3
In MariaDB version 10.5.9, an application can crash due to certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations related to temporary data structures...
Astra Linux – Vulnerability in Tomcat9
Uncontrolled resource consumption vulnerability in Apache Tomcat’s WebSocket chat example. This issue affects Apache Tomcat versions: 11.0.0-M20 through 11.0.24, 10.1.24 through 10.1.57, and 9.0.89 through 9.0.120. Users who have followed security guidelines to remove example web applications are...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB before version 10.6.2 allows an application to crash due to improper handling of a pushdown from a HAVING clause to a WHERE clause...
Astra Linux – Vulnerability in glibc
The mqnotify function in the GNU C Library also known as glibc versions 2.32 and 2.33 has a use-after-free vulnerability. It may access the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, resulting in a denial of service...
Astra Linux – Vulnerability in taglib
TagLib before version 2.0 allows a segmentation violation and causes the application to crash during tag writing when a crafted WAV file is used, in which the id3 chunk is the only valid chunk...
Astra Linux – Vulnerability in Nettle
A flaw was discovered in the way Nettle’s RSA decryption functions handled specially crafted ciphertext. An attacker could exploit this flaw to deliver manipulated ciphertext, resulting in application crashes and denial of service...
Astra Linux – Vulnerability in Zabbix
Stored or persistent cross-site scripting XSS is a type of XSS attack where the attacker first sends the malicious payload to the web application. The application then stores the payload e.g., in a database or server-side text files. Eventually, the application inadvertently executes the payload...