CVE-2023-39062

CVE-2023-39062 Spipu Html2Pdf alertdocument.domain HTTP/1.1 Host: example.afine.com Cookie: PHPSESSID=oiqo2oopiqt88teqgfb0a23vk0 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:109.0 Gecko/20100101 Firefox/113.0 Accept-Language: pl,en-US;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate...

Closing the Applied Cybersecurity Gap in Critical Infrastructure: A Cyber-To-Physical Security Assessment Framework for Water Systems

The integration of information technology and operational technology in water infrastructure creates pathways through which cyber compromise may affect physical service delivery. This study revisits the Applied Cybersecurity Gap ACG framework by evaluating an experimental Applied Cybersecurity Ga...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Apache Tomcat (CVE-2026-66299)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Apache Tomcat due to a flaw in in Apache Tomcat's WebSocket chat example. Apache Tomcat is used in our Speech microservices. This vulnerability has been addressed. Please read the details for...

azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-96636 via pillow (7.1.0)

pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...

azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-96644 via pillow (7.1.0)

pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...

Astra Linux - vulnerability in pyyaml

PyYAML versions 5.1 through 5.1.2 suffer from insufficient restrictions on the load and loadall functions due to a class deserialization issue; for example, Popen is a class within the subprocess module. NOTE: This issue arises because a fix for CVE-2017-18342 is incomplete...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130403 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from...

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...

Serge Zaitsev JSMN security vulnerabilities

Serge Zaitsev from JSMN has a security vulnerability. This vulnerability stems from buffer overflows in the jsmn.h file, jsmnParse, example/jsondump.c, and dump components. A remote attacker could exploit this vulnerability to cause a denial-of-service attack...

CVE-2026-95117

A buffer overflow vulnerability exists in the zserge jsmn parser (specifically versions involving HEAD 25647e6 ). A remote attacker can exploit this flaw by providing specially crafted JSON input to the parser, specifically targeting the jsmn.h, jsmn_parse(), example/jsondump.c, and dump() compon...

PT-2026-111610

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn parse, example/jsondump.c, dump components...

DRUPAL-CONTRIB-2026-206

This module enables you to audit a Drupal site by generating reports about its content, entities, display modes and configuration. The module doesn't sufficiently check entity access when rendering an entity through the display-mode example route. This allows an attacker to view unpublished or...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.22.0, <=2.22.4), org.apache.jackrabbit:jackrabbit-webapp (>=2.22.0, <=2.22.4) +5 more potentially affected by CVE-2026-92414 via org.apache.jackrabbit:jackrabbit-jcr-server (>=2.22.0, <=2.22.4)

org.apache.jackrabbit:jackrabbit-jcr-server MAVEN version =2.22.0, =2.22.0, =2.22.0, =1.66.0, =3.0.0-beta2, =4.1.0 Source cves: CVE-2026-92414 Source advisory: MEND:CVE-2026-92414...

tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...

tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...

PT-2026-107770

This module enables you to audit a Drupal site by generating reports about its content, entities, display modes and configuration. The module doesn't sufficiently check entity access when rendering an entity through the display-mode example route. This allows an attacker to view unpublished or...

PT-2026-107766

The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality. The "Email Example" feature implemented by the email example submodule can be used to send illegitimate emails to arbitrary email addresses. Therefore, th...

com.jgeppert.struts2:struts2-aws-lambda-support-example (>=1.4.0, <=1.4.3), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (>=1.4.0, <=1.4.3) +3 more potentially affected by CVE-2026-104713 via org.apache.struts:struts2-rest-plugin (>=6.0.0, <=6.11.0)

org.apache.struts:struts2-rest-plugin MAVEN version =6.0.0, =1.4.0, =1.4.0, =1.4.0, =6.0.0, =6.0.0, =6.11.0 Source cves: CVE-2026-104713 Source advisory: MEND:CVE-2026-104713...

tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...

tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...