69712 matches found
java-21-openj9-21.0.12.0-1.1 on GA media (moderate)
java-21-openj9-21.0.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11488-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
java-1.8.0-openjdk security update
1:1.8.0.502.b07-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.502.b07-1.1 - Update to 8u502-b07 GA. - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 ...
Apache Tomcat 11.0.2 Remote Code Execution
A proof of concept exploit for an unauthenticated remote code execution vulnerability in Apache Tomcat version 11.0.2. The vulnerability abuses partial PUT path equivalence to place a crafted Java serialized session file where a PersistentManager with FileStore can load it, resulting in unsafe Ja...
PT-2026-70937
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables,...
java-17-openj9-17.0.20.0-1.1 on GA media (moderate)
java-17-openj9-17.0.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11486-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
pt-platform__java-goof-1
Java Goof A vulnerable demo application, initially based on...
pt-identity__vulnerable-app
Spring4Shell Vulnerable Demo App This repository creates a doc...
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow due to the July 2026 CPU
Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...
Important: Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update
An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score...
Important: Red Hat Security Advisory: java-1.8.0-ibm security update
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server
A flaw was found in the ORB Object Request Broker component of IBM SDK, Java Technology Edition. A malicious IIOP Internet Inter-ORB Protocol server could exploit this vulnerability to force the loading and creation of unauthorized software components. This could lead to the execution of arbitrar...
CLSA-2026-1786379623 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.17-tuxcare.1...
CLSA-2026-1786379574 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.4-tuxcare.1...
CLSA-2026-1786379530 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.2-tuxcare.1...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Service Registry and Repository due to July 2026 CPU
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in July 2026. These issues are also addressed by WebSphere Application Server shipped with WebSphere...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk: java-25-openjdk-25.0.4.0.7-1.1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.1.hum1 aarch64, x8664...
CLSA-2026-1786361708 TuxCare security update for io.netty:netty-codec-http2 (1 CVE)
TuxCare rebuilt io.netty:netty-codec-http2 to address 1 CVE. Fixed in 4.1.49.Final-tuxcare.2...
Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)
Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM WebSphere Application Server and IBM WebSphere Application Server...
CVE-2026-42537 Apache Ranger: Remote Code Execution via JDBC URL Injection
Remote Code Execution via JDBC URL Injection in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...