69715 matches found
ROOT-APP-MAVEN-CVE-2023-43642 CVE-2023-43642 in io.root.org.xerial.snappy:snappy-java - Patched by Root
Root has patched CVE-2023-43642 in the io.root.org.xerial.snappy:snappy-java package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-34453 CVE-2023-34453 in io.root.org.xerial.snappy:snappy-java - Patched by Root
Root has patched CVE-2023-34453 in the io.root.org.xerial.snappy:snappy-java package for Root:Maven. Multiple fixed versions available...
Cross-site Scripting
Apache ActiveMQ is vulnerable to Cross-site Scripting XSS. The vulnerability is due to MessageServlet copying JMS message properties directly into HTTP response headers without validation, allowing attackers to inject or overwrite security-related HTTP headers by crafting JMS messages with...
SAP NetWeaver Java Application Server Unauthorized Access
The vulnerability of web containers in SAP NetWeaver Java Application Servers is related to incorrect path name restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or cause service failures by sending specially...
CVE-2026-23865 vulnerabilities
Vulnerabilities for packages: openjdk...
handlebars.java FileTemplateLoader Path Traversal
Impact Any application that passes user-controlled input to Handlebars.compile using a FileTemplateLoader or ClassPathTemplateLoader is vulnerable to arbitrary file read. This is a realistic attack surface for web applications that use template names from URL path parameters, request parameters, ...
com.cheroliv.slider:com.cheroliv.slider.gradle.plugin (>=0.0.4, <=0.0.6), com.cheroliv:slider (>=0.0.4, <=0.0.6) +13 more potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-pgvector (>=1.12.1-beta21, <=1.16.2-beta26)
dev.langchain4j:langchain4j-pgvector MAVEN version =1.12.1-beta21, =0.0.4, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =1.5.0, =2.0.0-rc1, =1.8.0.cr1, =1.8.0.cr1, =1.8.0.cr1, =1.8.0.cr1, =0.0.5, =1.2.0, =1.2.2 - org.cibseven.connect:cibseven-connect-ai-agent 2.2.0 Source cves: CVE-2026-55405 Source...
netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...
firefox: Integer overflow in the Networking: JAR component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Networking: JAR component...
Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CVE-2026-27727)
Summary There are vulnerabilities in mchange-commons-java-0.2.15.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-27727. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-27727 DESCRIPTION: mchange-commons-java, a library that provides Java utilities,...
CVE-2026-50632
A flaw was found in Apache CXF. This vulnerability, stemming from an incomplete fix for a previous issue, allows untrusted users who can configure Java Message Service JMS for Apache CXF to achieve arbitrary code execution. This could lead to a complete compromise of the affected system. Mitigati...
firefox: Integer overflow in the Networking: JAR component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Networking: JAR component...
Exploit-Development
Exploit Development What does this repository Contain? This...
CVE-2026-46771: Undefined Security Weakness
Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: Java Business Objects. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the...
Oracle PeopleSoft Unauthenticated Java Deserialization SSRF / RCE (CVE-2026-35273)
Binary data oraclepeoplesoftssrfcve202635273.nbin...
Linux Distros Unpatched Vulnerability : CVE-2026-6009
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-48991: Improper Authentication
XianYuLauncher is a Minecraft Java Edition launcher. In versions prior to 1.5.5, sensitive authentication artifacts could be exposed during a user-initiated login under certain local attack conditions. Affected versions relied on a fixed localhost redirect URI without PKCE or state validation...
Joern 4.0.559
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Linux Distros Unpatched Vulnerability : CVE-2026-8484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow vulnerability exists in the Jansi JNI ioctl wrapper due to a lack of size verification for the argument array before the system call. Thi...