157 matches found
CVE-2022-34169
Description Checks if CVE-2022-34169 is fixed on your machine. As far as I know, an exploit was found by a Google employee and not published. Since the fix is known, a small test routine was written with this to check whether the fix is available at runtime. Build yourself optional Optional: This...
bcel-6.13.0-1.1 on GA media (moderate)
bcel-6.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12080-1 Rating: moderate Cross-References: CVE-2026-105111 CVE-2026-94114 CVSS scores: CVE-2026-105111 SUSE : 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-94114 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N...
openSUSE 16 Security Update : bcel (openSUSE-SU-2026:22109-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22109-1 advisory. - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser bsc1284400. - CVE-2026-105111: Class2HTML...
Security update for bcel (moderate)
openSUSE security update: security update for bcel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22109-1 Rating: moderate References: bsc1284399 bsc1284400 Cross-References: CVE-2026-105111 CVE-2026-94114 CVSS scores: CVE-2026-105111 SUSE : 4.7...
OPENSUSE-SU-2026:22109-1 Security update for bcel
This update for bcel fixes the following issues: - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser bsc1284400. - CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS bsc1284399. Changes for bcel: - Update to version 6.13....
SUSE-SU-2026:24258-1 Security update for bcel
This update for bcel fixes the following issues: - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser bsc1284400. - CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS bsc1284399. Changes for bcel: - Update to version 6.13....
OPENSUSE-SU-2026:12080-1 bcel-6.13.0-1.1 on GA media
These are all security issues fixed in the bcel-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-94114
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...
SUSE CVE-2026-105111
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings in...
CVE-2026-105111
A flaw was found in Apache Commons BCEL. The Class2HTML component does not properly sanitize strings when generating web pages from Java class files. A remote attacker can supply a specially crafted class file to trigger stored Cross-Site Scripting XSS when a user views the generated report...
CVE-2026-94114
A flaw was found in Apache Commons BCEL Byte Code Engineering Library. When loading untrusted classes, the library caches them under their internally declared names without verifying them against the requested class name. A remote attacker could exploit this vulnerability to substitute legitimate...
Linux Distros Unpatched Vulnerability : CVE-2026-105111
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using...
Linux Distros Unpatched Vulnerability : CVE-2026-94114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self- declared names without validating the requested name,...
AZL-108017 CVE-2026-94114 affecting package bcel 5.2-37
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...
DEBIAN-CVE-2026-94114
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...
CVE-2026-94114
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...
AZL-108014 CVE-2026-105111 affecting package bcel 5.2-37
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings in...
DEBIAN-CVE-2026-105111
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings in...
CVE-2026-105111
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings in...
CVE-2026-105111 Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings in...