DoS (Denial of Service) io.micrometer:micrometer-core Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

DoS (Denial of Service) org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0 and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

Cryptographic Failure org.bouncycastle:bcpkix-jdk18on Dependency in Bamboo Data Center

This High severity Cryptographic Failure vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0 and 12.1.0 of Bamboo Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in httpcore5 jar (CVE-2026-54399)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-54399 reported for httpcore5-5.3.6.jar Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in httpcore5-h2 jar (CVE-2026-54428)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-54428 reported for httpcore5-h2-5.3.6.jar. Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-databind jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515 reported for jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all-5.19.0.jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilitiesCVE-2026-49432, CVE-2026-49434, CVE-2026-50734, CVE-2026-53916, CVE-2026-53917, CVE-2026-54475 reported for activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62873

Microsoft 365 Admin Center is affected by CVE-2026-62873 due to improper verification of cryptographic signatures, enabling elevated privileges over a network for an unauthorized attacker. The vulnerability details provided across sources (NVD, ENISA EUVD, CVE listing, and MSRC) confirm the issue...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability

...

CVE-2026-70559 Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll

Dinky's SysConfigController.getAll handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor lets the request through with no session or role check. Any remote unauthenticated caller who can rea...

DoS (Denial of Service) io.netty:netty-codec Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.12.1, 9.16.0, 9.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of...

MITM (Man-in-the-Middle) org.postgresql:postgresql Dependency in Jira Software Data Center

This High severity MITM Man-in-the-Middle vulnerability was introduced in versions 9.12.37, 10.3.23, and 11.3.8 of Jira Software Data Center. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:H/AT: P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N...

DoS (Denial of Service) io.netty:netty-codec Dependency in Jira Software Data Center

This DoS Denial of Service vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

Arbitrary code execution (RCE) @babel/traverse dependency in Jira Software Data Center

This is a vulnerability in a non-Atlassian Jira Software Data Cente dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This vulnerability affects certain versions of Atlassian Jira Software Data Center. The @babel/traverse dependency is affected b...

File Inclusion rollup Dependency in Jira Software Data Center

This High severity File Inclusion vulnerability was introduced in versions 9.17.5 and 11.3.8 of Jira Software Data Center. This File Inclusion vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E: P allows an unauthenticate...

DoS (Denial of Service) undici Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 11.3.8 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to cause a...

DoS (Denial of Service) tar Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector o...

DoS (Denial of Service) io.netty:netty-codec-http Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS...