Lucene search
+L

10627 matches found

Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•14 views

PT-2026-37747

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.1AI score0.02271EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•19 views

The vulnerability of the Apache MINA network Java application framework, related to deserialization mechanism flaws, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Apache MINA network Java application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.6AI score0.00763EPSS
SaveExploits1References3Affected Software2
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•19 views

PT-2026-37879

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

7.4CVSS5.9AI score0.03846EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•30 views

PT-2026-37952

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Difficult to...

5.9CVSS6.5AI score0.02747EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•27 views

PT-2026-37440

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information...

3.7CVSS5.8AI score0.00088EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•18 views

The vulnerability of the Apache MINA network Java application framework, related to deserialization mechanism flaws, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Apache MINA network Java application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.6AI score0.00752EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•17 views

PT-2026-37780

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM...

5.9CVSS6.5AI score0.00799EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•20 views

PT-2026-37703

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability c...

7.5CVSS7AI score0.02766EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/05/05 11:54 p.m.•20 views

kernel: crypto: algif_aead - Revert to operating out-of-place

A flaw was found in the Linux kernel's algifaead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive...

7.8CVSS7.2AI score0.03437EPSS
SaveExploits244References14
Github Security Blog
Github Security Blog
•added 2026/05/05 10:17 p.m.•20 views

sse-channel: SSE Injection via unsanitized event fields

Impact Implementations that allows user-provided values to be passed to event, retry or id fields would be susceptible to event spoofing, where an attacker could inject arbitrary messages into the stream. - Event Spoofing: Attacker can inject arbitrary SSE events into the stream - Client-side...

8.7CVSS5.9AI score0.00538EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/05/05 10:17 p.m.•47 views

GHSA-84HM-WFH8-C5PG sse-channel: SSE Injection via unsanitized event fields

Impact Implementations that allows user-provided values to be passed to event, retry or id fields would be susceptible to event spoofing, where an attacker could inject arbitrary messages into the stream. - Event Spoofing: Attacker can inject arbitrary SSE events into the stream - Client-side...

8.7CVSS5.9AI score0.00538EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/05/05 1:20 p.m.•47 views

kernel: crypto: algif_aead - Revert to operating out-of-place

A flaw was found in the Linux kernel's algifaead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive...

7.8CVSS7.2AI score0.03437EPSS
SaveExploits244References14
RedHat Linux
RedHat Linux
•added 2026/05/05 10:20 a.m.•37 views

kernel: crypto: algif_aead - Revert to operating out-of-place

A flaw was found in the Linux kernel's algifaead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive...

7.8CVSS7.2AI score0.03437EPSS
SaveExploits244References14
RedHat Linux
RedHat Linux
•added 2026/05/05 10:20 a.m.•28 views

kernel: crypto: algif_aead - Fix minimum RX size check for decryption

A flaw was found in the Linux kernel, specifically within the algifaead module. The vulnerability involves an incorrect check for the minimum receive buffer size during decryption, which did not properly account for the tag size. This could potentially lead to issues with data integrity or...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/05/05 5:58 a.m.•46 views

kernel: crypto: algif_aead - Fix minimum RX size check for decryption

A flaw was found in the Linux kernel, specifically within the algifaead module. The vulnerability involves an incorrect check for the minimum receive buffer size during decryption, which did not properly account for the tag size. This could potentially lead to issues with data integrity or...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/05/05 5:58 a.m.•19 views

kernel: crypto: algif_aead - Revert to operating out-of-place

A flaw was found in the Linux kernel's algifaead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive...

7.8CVSS7.2AI score0.03437EPSS
SaveExploits244References14
RedHat Linux
RedHat Linux
•added 2026/05/05 5:31 a.m.•22 views

kernel: crypto: algif_aead - Fix minimum RX size check for decryption

A flaw was found in the Linux kernel, specifically within the algifaead module. The vulnerability involves an incorrect check for the minimum receive buffer size during decryption, which did not properly account for the tag size. This could potentially lead to issues with data integrity or...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/05/05 5:31 a.m.•97 views

kernel: crypto: algif_aead - Revert to operating out-of-place

A flaw was found in the Linux kernel's algifaead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive...

7.8CVSS7.2AI score0.03437EPSS
SaveExploits244References14
RedHat Linux
RedHat Linux
•added 2026/05/05 3:47 a.m.•16 views

Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

8.7CVSS7.3AI score0.00647EPSS
SaveExploits0References6
Redos
Redos
•added 2026/05/05 12:00 a.m.•16 views

ROS-20260505-73-0010

A vulnerability in the http.cookies library of the Python programming language interpreter CPython is related to improper encoding or escaping of output data. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality and integrity of protected information...

7.5CVSS7.3AI score0.00652EPSS
SaveExploits0
Rows per page
Query Builder