Lucene search
+L

66188 matches found

RedhatCVE
RedhatCVE
•added 2026/09/25 1:26 a.m.•19 views

CVE-2026-88032

A flaw was found in the MongoDB Java Driver. A use-after-free vulnerability in the reactive client-side encryption component can occur when an encrypted operation is cancelled. An attacker able to cause such an operation to be cancelled may cause the hosting application process to terminate. This...

8.2CVSS5.9AI score0.00257EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-77421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a...

6.5CVSS6AI score0.00434EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•20 views

SUSE SLES15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:4339-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4339-1 advisory. - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. -...

6.8CVSS6.1AI score0.0031EPSS
SaveExploits0References11
NVD
NVD
•added 2026/09/24 9:17 p.m.•19 views

CVE-2026-14441

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS0.00355EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:58 p.m.•37 views

CVE-2026-14441

A logic flaw in the Java cache key handling of Brocade SANnav allows for improper identifier resolution when processing specific user account structures. This vulnerability exists in SANnav versions before 3.0.1a . The issue has been remediated by updating the internal comparison routines to ensu...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 8:58 p.m.•19 views

EUVD-2026-86470

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 8:58 p.m.•17 views

CVE-2026-14441 Logic flaw in SANnav Java cache key handling object comparison handling

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 8:58 p.m.•34 views

CVE-2026-14441 Logic flaw in SANnav Java cache key handling object comparison handling

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS0.00355EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/24 7:56 p.m.•24 views

org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification

A flaw was found in Bouncy Castle for Java. During the RSA PKCS1 verification process, the last two hash bytes are incorrectly skipped when a NULL-omitted path is utilized. This vulnerability could allow an attacker to bypass cryptographic signature verification, potentially leading to the...

8.7CVSS7AI score0.00171EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/24 7:56 p.m.•40 views

org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names

A flaw was found in Bouncy Castle for Java. A remote, unauthenticated attacker could exploit a quadratic-time escaping vulnerability when stringifying X.500 distinguished names. This could lead to a Denial of Service DoS due to excessive resource consumption...

8.7CVSS7.1AI score0.00493EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/09/24 4:28 p.m.•14 views

SUSE CVE-2026-77420

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORYIGNORE configuration value into a Java regular expression...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/24 4:28 p.m.•16 views

SUSE CVE-2026-77421

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a user-controlled search term from doSearchString text in builtins/src/main/java/org/jline/builtins/Nano.java to Java's backtracking regular expression...

6.5CVSS6.1AI score0.00434EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/24 4:28 p.m.•14 views

SUSE CVE-2026-77423

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...

7.5CVSS5.7AI score0.00385EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/24 4:09 p.m.•19 views

Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs

Summary Vulnerability in the IBM® Runtime Environment Java™ Version 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs: CVE-2026-61308 and CVE-2026-60589 Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows...

6.8CVSS5.8AI score0.0031EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/24 4:09 p.m.•17 views

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.3.1 before Patch 13 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is...

9.6CVSS6.3AI score0.00534EPSS
SaveExploits1Affected Software1
CloudLinux
CloudLinux
•added 2026/09/24 9:19 a.m.•16 views

java-1.7.0-openjdk: Fix of CVE-2026-47010

CVE-2026-47010: Enhance JPEG handling JDK-8374058, JDK-8388811...

3.7CVSS6.1AI score0.00254EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/09/24 9:12 a.m.•24 views

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to upstream tag...

6.8CVSS6AI score0.0031EPSS
SaveExploits0References14
osv_suse
osv_suse
•added 2026/09/24 9:12 a.m.•21 views

SUSE-SU-2026:4339-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to upstrea...

6.8CVSS5.9AI score0.0031EPSS
SaveExploits0References8
osv_root
osv_root
•added 2026/09/24 3:54 a.m.•14 views

ROOT-APP-MAVEN-CVE-2023-28867 CVE-2023-28867 in com.graphql-java:graphql-java - Patched by Root

Root has patched CVE-2023-28867 in the com.graphql-java:graphql-java package for Root:Maven. Multiple fixed versions available...

7.5CVSS6.3AI score0.01051EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/24 3:54 a.m.•49 views

ROOT-APP-MAVEN-CVE-2024-40094 CVE-2024-40094 in com.graphql-java:graphql-java - Patched by Root

Root has patched CVE-2024-40094 in the com.graphql-java:graphql-java package for Root:Maven. Multiple fixed versions available...

5.3CVSS6.3AI score0.00943EPSS
SaveExploits2
Rows per page
Query Builder