69685 matches found
IBM Java 7.1 < 7.1.5.32 / 8.0 < 8.0.8.71 Multiple Vulnerabilities
The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.32 / 8.0 prior to 8.0.8.71. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle August 18 2026 CSPU advisory. - Vulnerability in Oracle Java SE component: 2D. Supported versions that are...
CVE-2026-75327
The DocSys-master V2.02.85 application contains an arbitrary file upload vulnerability within the uploadMarkdownPic interface located at src/com/DocSystem/controller/DocController.java. This flaw allows an unauthenticated network attacker to upload files of dangerous types, potentially leading to...
CVE-2026-54550: Improper Limitation of a Pathname to a Restricted Directory
IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...
CVE-2026-75327
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
PT-2026-82263
Name of the Vulnerable Software and Affected Versions DocSys-master version 2.02.85 Description An arbitrary file upload issue exists in the 'uploadMarkdownPic' interface within the src/com/DocSystem/controller/DocController.java file. This allows an attacker to upload unauthorized files to the...
IBM Java 7.1 < 7.1.5.31 / 8.0 < 8.0.8.70
The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.31 / 8.0 prior to 8.0.8.70. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update August 2026 advisory. - In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested...
Debian dla-4756 : openjdk-11-dbg - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4756 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4756-1 [email protected]...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093179)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093179 advisory. A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they...
PT-2026-82279
Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75328
DocSys-master version 2.02.85 is vulnerable to an arbitrary file read vulnerability within the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. This flaw allows an attacker to access files on the system that should remain restricted. No information regarding a p...
CVE-2026-75328: Improper Limitation of a Pathname to a Restricted Directory
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-71054: Allocation of Resources Without Limits or Throttling
Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...
MiracleLinux 8 : java-17-openjdk-17.0.20.1.1-1.1.el8 (AXSA:2026-1669:15)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1669:15 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +9119 more potentially affected by CVE-2026-68569 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.57)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.1.3, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-68569 Source advisory: MEND:CVE-2026-68569...
GHSA-3H2G-J4WP-7QQQ Duplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m4rf-3fr8-xwx3. This link is maintained to preserve external references. Original Description NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function,...
Security Bulletin: Vulnerability in opentelemetry-java affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in opentelemetry-java has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
K000163082: OpenJDK vulnerability CVE-2026-70906
Security Advisory Description Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE...
Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in jackson-databind has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
Arbitrary Argument Injection
Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Arbitrary Argument Injection through the per-call options handling in the java function in nltk/internals.py. An attacker can achieve arbitrary...