19548 matches found
Improper Neutralization of Special Elements Used in a Template Engine
Overview org.apache.camel:camel-http-common is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers ...
Improper Neutralization of Special Elements Used in a Template Engine
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...
Improper Neutralization of Special Elements Used in a Template Engine
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...
Improper Neutralization of Special Elements Used in a Template Engine
Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the...
org.apache.camel.kafkaconnector:camel-azure-storage-files-source-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:camel-ftp-sink-kafka-connector (4.22.0) +25 more potentially affected by CVE-2026-79985 via org.apache.camel:camel-ftp-common (>=4.19.0, <=4.22.0)
org.apache.camel:camel-ftp-common MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-79985https://vulners.com/cve/CVE-2026-7...
org.apache.camel.karaf:camel-jetty-common (>=4.18.1, <=4.18.4), org.apache.camel.springboot:camel-jetty-starter (>=4.15.0, <=4.18.4) +4 more potentially affected by CVE-2026-85313 via org.apache.camel:camel-jetty-common (>=4.15.0, <=4.18.4)
org.apache.camel:camel-jetty-common MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.15.0, =5.2-m1, =5.2-m1, =0.5.5, =0.5.6 Source cves: CVE-2026-85313 Source advisory: MEND:CVE-2026-85313...
org.apache.camel.springboot:camel-jetty-starter (>=4.19.0, <=4.22.0), org.apache.camel:camel-jetty (>=4.19.0, <=4.22.0) potentially affected by CVE-2026-85313 via org.apache.camel:camel-jetty-common (>=4.19.0, <=4.22.0)
org.apache.camel:camel-jetty-common MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-85313 Source advisory: MEND:CVE-2026-85313...
org.apache.camel.kafkaconnector:camel-azure-storage-files-source-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:camel-ftp-sink-kafka-connector (4.22.0) +25 more potentially affected by CVE-2026-79986 via org.apache.camel:camel-ftp-common (>=4.19.0, <=4.22.0)
org.apache.camel:camel-ftp-common MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-79986https://vulners.com/cve/CVE-2026-7...
org.apache.camel.kafkaconnector:camel-azure-storage-files-source-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:camel-ftp-sink-kafka-connector (4.22.0) +25 more potentially affected by CVE-2026-79984 via org.apache.camel:camel-ftp-common (>=4.19.0, <=4.22.0)
org.apache.camel:camel-ftp-common MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-79984https://vulners.com/cve/CVE-2026-7...
org.apache.camel.kafkaconnector:camel-azure-storage-files-source-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:camel-ftp-sink-kafka-connector (4.22.0) +25 more potentially affected by CVE-2026-79983 via org.apache.camel:camel-ftp-common (>=4.19.0, <=4.22.0)
org.apache.camel:camel-ftp-common MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-79983https://vulners.com/cve/CVE-2026-7...
org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.4) potentially affected by CVE-2026-108771 via org.apache.kylin:kylin-core-common (>=5.0.0-alpha, <=5.0.4)
org.apache.kylin:kylin-core-common MAVEN version =5.0.0-alpha, =5.0.0-alpha, =5.0.4 Source cves: CVE-2026-108771 Source advisory: MEND:CVE-2026-108771...
EUVD-2026-104130
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...
dotnet: dotnet: Denial of Service via specially crafted web requests
A flaw was found in dotnet. The Microsoft Common Object Runtime Library improperly handles incoming web requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted web requests to an affected application, resulting in a Denial of Service DoS...
CVE-2026-16487
A flaw exists in bootc when utilizing the default containers signature policy. During automatic or manual upgrades of a mutable image tag , the system may apply unsigned content for registries falling through to insecureAcceptAnything . This allows an attacker capable of updating that tag to exec...
store-api
RESTful API auto-generation for common-store data layer fastify + fastapi adapters over GQL, spec-driven dual-runtime parity...
ROS-20261019-73-0015
The vulnerability of the secattestinfo function drivers/accel/habanalabs/common/habanalabsioctl.c in the Linux kernel is related to insufficient protection of service data when processing the Pad0 field. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
CVE-2026-111439: Missing Authorization
在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pgreadbinaryfileblocks 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall。该底层例程仅执行了路径规范化检查以及针对 .. 路径遍历和数据目录边界的基本检查，缺失了对调用者数据库权限（如 SELECT 权限）的校验。此外，辅助函数 isrowdatafile...
WSO2 Identity Server as Key Manager: Permissions, licensing, and access control issues
WSO2 Identity Server as Key Manager: Versions 5.10.0 to 5.10.0.370; WSO2 Open Banking IAM 2.0.0 to 2.0.0.419; WSO2 Identity Server: Versions 5.10.0 to 5.10.0.379, 5.11.0 to 5.11.0.415, 6.0.0 to 6.0.0.251, 6.1.0 to 6.1.0.251, 7.0.0 to 7.0.0.127, and 7.1.0 to 7.1.0.34. WSO2 Carbon SCIM Common...
DeepPavlov Team: Vulnerability in input validation
The DeepPavlov team has identified a security vulnerability in versions 1.7.0 and earlier of DeepPavlov. This vulnerability stems from improper handling of the resolve function in the Config Reference Resolver component’s deeppavlov/core/common/params.py file, which may lead to remote code...