72257 matches found
ECHO-9D6E-B01E-B367
Bulletin has no description...
ECHO-FCC4-5D8A-B7AF
Bulletin has no description...
ECHO-FAB7-82CE-9C15
Bulletin has no description...
ECHO-C184-6FD7-AE80
Bulletin has no description...
ECHO-B416-47AD-FA4D
Bulletin has no description...
ECHO-60A1-36C5-6226
Bulletin has no description...
ECHO-860C-916C-177E
Bulletin has no description...
ECHO-C79D-4D79-8029
Bulletin has no description...
ECHO-DE58-3B9A-5F04
Bulletin has no description...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
ECHO-732C-D358-5FEF
Bulletin has no description...
PT-2026-64021
Name of the Vulnerable Software and Affected Versions Logto affected versions not specified Description Logto performs principal lookup without normalizing email and identifier strings. This lack of normalization allows for principal collision, which can lead to unauthorized account access when...
CVE-2026-61246
CVE-2026-61246 affects Oracle Platform Security for Java (Oracle Fusion Middleware) - Centralized Thirdparty Jars. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access and can lead to takeover of Oracle Platform Security for Java. Affected versions are 12.2....
CVE-2026-61246
...
CVE-2026-60372
CVE-2026-60372 concerns the Oracle Platform Security for Java component of Oracle Fusion Middleware, specifically the Centralized Thirdparty Jars. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise...
CVE-2026-60371
...
CVE-2026-60372
...
CVE-2026-60371
CVE-2026-60371 affects Oracle Platform Security for Java (Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue is described as difficult to exploit, requiring low privileges and access to the hardware’s physical com...