67785 matches found
CVE-2026-94052
A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...
Rocky Linux 9.6 [TuxCare] Security Update: java-21-openjdk / java-21-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778051357)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778051357 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE...
AlmaLinux 9.2 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1753799434)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753799434 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component...
CentOS Linux 8.4 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc (CENTOS8.4:CLSA-2026:1777942551)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777942551 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP...
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.19 Update (Important) (RHSA-2026:73644)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73644 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...
CentOS Linux 8 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1767028399)
The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1767028399 advisory. - Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the...
Uncontrolled Resource Consumption
Apache Struts is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to unbounded growth of internal localized-text caches based on attacker-controlled locale values from incoming requests, which allows an unauthenticated remote attacker to exhaust the Java heap and cause a...
Improper Signature Verification
Bouncy Castle for Java is vulnerable to Improper Signature Verification. The vulnerability is due to CMS.verifySignatures returning true for SignedData objects containing no signers, which allows an attacker to bypass signature verification and have unsigned data incorrectly treated as successful...
Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities in Bouncy Castle for Java
Summary TSSC/IMC addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2026-12185 DESCRIPTION: In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle f...
CVE-2026-100658
A flaw was found in Netty. An unbounded memory queue in the WebSocket server extension handler allows an unauthenticated remote attacker to cause a Denial of Service DoS. By sending pipelined HTTP requests faster than the server produces responses, an attacker can force the connection queue to gr...
Uncontrolled Resource Consumption
Bouncy Castle for Java is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to unbounded iteration counts in CRMF/CMP password-MAC processing, which allows an attacker to supply a maliciously high iteration count and cause excessive resource consumption, potentially...
cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext
Detailed Report: https://oss-fuzz.com/testcase?key=5845698176942080 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...
CLEANSTART-2026-IG77090 yawkat LZ4 Java provides LZ4 compression for Java
CVE-2026-59949 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...
CLEANSTART-2026-YG17751 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the apache-hive package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-KE95640 JLine is a Java library for handling console input
CVE-2026-77420 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
CLEANSTART-2026-VS62795 In Bouncy Castle for Java before 1
CVE-2026-58062 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-XR16357 In Bouncy Castle for Java before 1
CVE-2026-59650 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-WM89566 In Bouncy Castle for Java before 1
CVE-2026-58063 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...