CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509

The Apache PLC4X (PLC4J) Java implementation is vulnerable to pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser . The root causes include memory allocation with excessive size values, allocation of resources without limits, and uncontrolled recursion. Specificall...

EUVD-2026-89678

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

cve-2017-12149-playground

Muchas industrias críticas banca, atención médica y manufactura dependen de middleware heredado que fue construido para ejecutarse específicamente en JBoss 5 o 6. Debido a que estas aplicaciones suelen ser demasiado frágiles para migrar a versiones modernas de WildFly el sucesor de JBoss, las...

ddc

ddc — Descompilador DEX → Java en Rust English | 简体中文 ddc descompila bytecode DEX de Android de vuelta a Java legible — a escala de aplicaciones del mundo real, consultable como una base de datos y verificado con javac : cada uno de los 909.689 archivos que emite a través de siete APKs del mundo...

CVE-2024-23897

CVE-2024-23897 Construcción del entorno 1. Instalación de Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Descarga del archivo WAR de Jenkins wget https://get.jenkins.io/war/2.441/jenkins.war 3. Cambiar la versión predeterminada de Java - Seleccionar Java 11 sudo update-alternatives...

CVE-2023-43208

CVE-2023-43208 — Mirth Connect RCE Proof-of-Concept exploit for CVE-2023-43208 , an unauthenticated Remote Code Execution vulnerability in Mirth Connect versions prior to 4.4.1. Description Mirth Connect is a widely deployed open-source healthcare integration engine. This vulnerability leverages ...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, opensearch, nextflow, ruby3.3-jrjackson, ruby3.4-jrjackson, wavefront-proxy, jenkins-plugin-manager, cassandra-reaper, scala, apicurio-registry, apache-pulsar, celeborn, tez, logstash, thingsboard, confluent-kafka, neo4j, apache-tika, kafka,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, opensearch, nextflow, ruby3.3-jrjackson, ruby3.4-jrjackson, wavefront-proxy, jenkins-plugin-manager, cassandra-reaper, scala, apicurio-registry, apache-pulsar, celeborn, tez, logstash, thingsboard, confluent-kafka, neo4j, apache-tika, kafka,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, opensearch, nextflow, ruby3.3-jrjackson, ruby3.4-jrjackson, wavefront-proxy, jenkins-plugin-manager, cassandra-reaper, scala, apicurio-registry, apache-pulsar, celeborn, tez, logstash, thingsboard, confluent-kafka, neo4j, apache-tika, kafka,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, opensearch, nextflow, ruby3.3-jrjackson, ruby3.4-jrjackson, wavefront-proxy, jenkins-plugin-manager, cassandra-reaper, scala, apicurio-registry, apache-pulsar, celeborn, tez, logstash, thingsboard, confluent-kafka, neo4j, apache-tika, kafka,...

SAP NetWeaver Application Server Java 7.5 - Local File Inclusion

SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload Un endpoint de carga de archivos totalmente no autenticado en Visual Composer permite a cualquiera subir archivos arbitrarios por ejemplo, un web-shell JSP al servidor. Herramienta de prueba de concepto para verificar y explotar la vulnerabilidad de carga de archivos no...

com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects

A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.19 Update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System CVSS base score, which gives a detailed severity rating, ...

CVE-2023-51444

Este README te ayuda a comenzar con el desarrollo de GeoServer. Te guiará a través del proceso de obtener el código fuente, compilarlo y ejecutarlo. El desarrollo de GeoServer requiere Java 8, Maven y git. Debido a cambios sutiles en las bibliotecas de clases de Java, actualmente requerimos...

PT-2026-103519

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT CONFIG , DOTNET STARTUP HOOKS, and JAVA TOOL OPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet...

CentOS Linux 7 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-devel-debug / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1742319123)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1742319123 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...