69650 matches found
Security Bulletin: Due to use bcprov-jdk18on-1.79.jar, IBM webMethods Integration Server is affected by multiple vulnerabilities.
Summary Multiple vulnerabilities were addressed in IBM webMethods Integration Server by upgrading the version of the Bouncy Castle BC-Java bcprov jar to 1.84.0 Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the...
CLSA-2026-1788870312 TuxCare security update for org.springframework.graphql:spring-graphql (5 CVEs)
TuxCare rebuilt org.springframework.graphql:spring-graphql to address 5 CVEs. Fixed in 1.3.5-tuxcare.3...
CLSA-2026-1788865685 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5...
CLSA-2026-1788853304 TuxCare security update for com.jayway.jsonpath:json-path (1 CVE)
TuxCare rebuilt com.jayway.jsonpath:json-path to address 1 CVE. Fixed in 2.7.0-tuxcare.1...
Security Bulletin: Vulnerability in IBM SDK affectecting Rational Business Developer
Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU plus four additional vulnerabilities used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS...
Security Bulletin: Vunerabilities in IBM SDK affecting Rational Business Developer
Summary There are vulnerabilities in IBM SDK Java Technology Edition Quarterly CPU including Oracle April 2026 CPU. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-22021 DESCRIPTION: Easily exploitable vulnerability allows unauthenticat...
Security Bulletin: Vulnerability in IBM Seumeru affectecting Rational Business Developer
Summary There are vulnerabilities in IBM Semeru Runtime Quarterly CPU Includes OpenJDK July 2026 CPU plus three additional vulnerabilities used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-41254...
CVE-2026-86512
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...
CVE-2026-86512 java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...
CVE-2026-86512
CVE-2026-86512 affects java-json-tools json-patch versions up to 1.13 , specifically the CopyOperation.apply and MoveOperation.apply functions in the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java (Copy Move Operations component). The root cause is improper access controls , enabl...
CVE-2026-86512 java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...
CVE-2026-86511
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...
ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization...
CLEANSTART-2026-FR63847 yawkat LZ4 Java provides LZ4 compression for Java
Multiple security vulnerabilities affect the elasticsearch package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...
EUVD-2026-72577
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...
CVE-2026-66768 Improper Access Control in SAP NetWeaver (SAP GUI for Java)
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...
ROS-20260908-73-0019
The vulnerability in Java-11-openjdk is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260908-73-0009
The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...