CVE-2026-40022

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

PT-2026-35385

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.14.1 through 4.14.5 Apache Camel versions 4.18.0 through 4.18.1 Description When authentication is enabled on the embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path...

org.javaloong.kongmink.keycloak:keycloak-embedded-server (1.1.0), org.keycloak:keycloak-dependencies-server-all (19.0.3) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (19.0.3)

org.keycloak:keycloak-saml-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.javaloong.kongmink.keycloak:keycloak-embedded-server 1.1.0 -...

CVE-2025-64298

CVE-2025-64298 affects NMIS/BioDose V22.02 and earlier where embedded Microsoft SQL Server Express is used. The vulnerability arises from insecure Windows share directory paths by default, enabling local users on networked client workstations to access the SQL Server database and configuration fi...

Brother Printers Debut Embedded HTTP Server Denial of Service (CVE-2017-16249)

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying 300 seconds with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web...

EUVD-2016-0488

Malware in sbrugna...

TOTOLINK X15 Router formMapReboot() Arbitrary Command Execution

The vulnerability of the formMapReboot function in the embedded server of the TOTOLINK X15 router’s microprogramming software is related to the lack of measures to clean input data during the processing of the deviceMacAddr parameter. Exploiting this vulnerability allows a remote attacker to...

org.javaloong.kongmink.keycloak:keycloak-embedded-server (1.1.0), org.keycloak:keycloak-dependencies-server-all (19.0.3) +9 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (19.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.javaloong.kongmink.keycloak:keycloak-embedded-server 1.1.0 -...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: OSV:GHSA-93QR-H8PR-4593...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-9296373...

HTTP/3 support in Reactor 2024.0 Release Train

HTTP/3, the latest major version of the Hypertext Transfer Protocol, had its specification finalized in June 2022. This version is designed to enhance performance, reliability, and security. Unlike its predecessors, HTTP/3 utilizes QUIC instead of TCP as its transport layer. QUIC is a UDP-based,...

Cesanta Mongoose security vulnerabilities

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, and WenSocket client and server. A security vulnerability exists in Cesanta Mongoose version 6.18, which stems from a buffer overflow in...

SUSE CVE-2018-10583

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt...

Embedthis Software GoAhead security vulnerabilities

Embedthis Software GoAhead is an embedded Web server from Embedthis Software. A security vulnerability exists in Embedthis Software GoAhead, which stems from the fact that the code that performs password matching during "basic" HTTP authentication does not use the constant time memcmp and is not...

embedded web server Buffer Overflow

The vulnerability of the webSetHostTable function in the embedded web server software is related to buffer overflows in the stack due to insufficient input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or cause service...

Embedthis Software GoAhead Resource Management Error Vulnerability

Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. Embedthis Software GoAhead suffers from a resource management error vulnerability. An attacker can exploit this vulnerability to corrupt the heap structure and execute code...

Cesanta Mongoose Input Validation Error Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. An input validation error vulnerability exists in Cesanta Mongoose. The vulnerability stems from a network system or...

GoAhead Web server HTTP header injection vulnerability

GoAhead WebServer is an open source embedded WEB server program that supports Active Server Pages, embedded Javascript, SSL authentication and encryption. An HTTP header injection vulnerability exists in GoAhead Web server. It allows an attacker to spoof a specific host header, which allows the...

Moxa EDS-G516E Embedded Web Server Heap Buffer Overflow DoS

The vulnerability of the dot1xRadiusServerSetting function in the embedded web server of the Moxa EDS-G516E and Moxa EDS-510E microcontroller software systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a...

Cesanta Mongoose Embedded Web Server Library Resource Management Error Vulnerability (CNVD-2019-22655)

Cesanta Mongoose Embedded Web Server Library is a cross-platform embedded server and web library written in C. It is designed to be used with a wide range of applications, including... A resource management error vulnerability exists in the 'mgcgievhandler' function of the mongoose.c file in...