Lucene search
+L

59765 matches found

NCSC
NCSC
•added 2026/09/23 1:28 p.m.•5 views

vulnerabilities in Adobe Experience Manager Forms JEE

Adobe has identified 6 vulnerabilities in Adobe Experience Manager AEM Forms for Java Enterprise Edition JEE, including AEM 6.5 Forms and AEM 6.5 LTS Forms. These vulnerabilities concern various security issues, such as improper authorization, inadequate input validation, Server-Side Request...

10CVSS6.7AI score0.01494EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/23 12:23 p.m.•12 views

CVE-2021-44228-playground

LOG4SHELL-CVE-2021-44228-Validator Acerca de Esta herramienta le permite verificar si una aplicación web Java simple es vulnerable a CVE-2021-44228 para una versión de Java y Log4J proporcionada por el usuario. También puede opcionalmente aplicar una de las mitigaciones predefinidas. El laborator...

10CVSS7.6AI score0.99999EPSS
SaveExploits375References2
RedHat Linux
RedHat Linux
•added 2026/09/23 11:36 a.m.•7 views

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

6.8CVSS5.4AI score0.0031EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/23 11:36 a.m.•6 views

OpenJDK: Enhance TLS server (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...

5.3CVSS5.6AI score0.00278EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/23 11:36 a.m.•9 views

Moderate: Red Hat Security Advisory: java-1.8.0-ibm security update

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

6.8CVSS5.8AI score0.0031EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 11:36 a.m.•5 views

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

3.7CVSS5.5AI score0.00265EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/23 10:57 a.m.•7 views

CVE-2026-55511

CVE-2026-55511: RCE autenticado en Yamcs StreamSQL Prueba de concepto no armada y documentación técnica para CVE-2026-55511, una vulnerabilidad autenticada de inyección de código Java en el compilador de expresiones agregadas StreamSQL de Yamcs...

9.1CVSS5.9AI score0.00677EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/23 6:30 a.m.•15 views

cve-2017-12149-playground

Muchas industrias críticas banca, atención médica y manufactura dependen de middleware heredado que fue construido para ejecutarse específicamente en JBoss 5 o 6. Debido a que estas aplicaciones suelen ser demasiado frágiles para migrar a versiones modernas de WildFly el sucesor de JBoss, las...

9.8CVSS8.4AI score0.90713EPSS
SaveExploits14References1
RedhatCVE
RedhatCVE
•added 2026/09/23 5:46 a.m.•4 views

CVE-2026-89425

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

7.5CVSS5.9AI score0.00492EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/23 5:18 a.m.•10 views

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP - Se puede obtener una shell reversa con éxito Este artículo y la herramienta son solo para compartir conocimientos técnicos. Está estrictamente prohibido su uso ilegal. El usuario asume toda la responsabilidad por las consecuencias. Desencadenar la ejecución de...

9.8CVSS8.7AI score0.5537EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/23 5:04 a.m.•8 views

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues due to Java SDK

Summary IBM Sterling Secure Proxy is affected by multiple vulnerabilities reported for IBM Java and are addressed in version 6.1.0.5 Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

7.5CVSS6.2AI score0.0047EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/23 5:01 a.m.•11 views

Security Bulletin: IBM Sterling Secure Proxy is affected by multiple vulnerabilities in Bouncy Castle for Java FIPS

Summary IBM Sterling Secure Proxy is affected by multiple vulnerabilities CVE-2026-13505, CVE-2026-9563 in Bouncy Castle for Java FIPS and are addressed in version 6.2.1.3. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X...

8.7CVSS6AI score0.0063EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/09/23 4:55 a.m.•9 views

CVE-2024-23897

CVE-2024-23897 Construcción del entorno 1. Instalación de Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Descarga del archivo WAR de Jenkins wget https://get.jenkins.io/war/2.441/jenkins.war 3. Cambiar la versión predeterminada de Java - Seleccionar Java 11 sudo update-alternatives...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
•added 2026/09/23 3:53 a.m.•7 views

CVE-2023-43208

CVE-2023-43208 — Mirth Connect RCE Exploit de Prueba de Concepto para CVE-2023-43208 , una vulnerabilidad de Ejecución Remota de Código no autenticada en Mirth Connect versiones anteriores a 4.4.1. Descripción Mirth Connect es un motor de integración sanitaria de código abierto ampliamente...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21
RedhatCVE
RedhatCVE
•added 2026/09/23 3:32 a.m.•4 views

CVE-2026-12816

A flaw was found in Bouncy Castle for Java. This vulnerability allows for Message Authentication Code MAC forgery in the IESEngine stream-mode. The issue arises from a length-dependent Key Derivation Function KDF split, which an attacker could exploit to bypass integrity checks. This could lead t...

8.7CVSS5.7AI score0.00179EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/23 3:03 a.m.•5 views

CVE-2026-12803

A flaw was found in Bouncy Castle for Java. The cryptographic module responsible for authenticated encryption does not correctly link a unique random value nonce with the message authentication code when no additional authenticated data is provided. This oversight could allow an attacker to forge...

8.7CVSS5.8AI score0.00201EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/23 2:06 a.m.•52 views

CVE-2026-89425 jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth

UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser,...

7.5CVSS0.00492EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/23 2:06 a.m.•39 views

CVE-2026-89425

The FasterXML jackson-core library contains a vulnerability in the UTF8DataInputJsonParser._reportInvalidToken() method. The root cause is that this specific parser fails to honor ErrorReportConfiguration.getMaxErrorTokenLength() (default 256) when building error messages, unlike other sibling im...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/23 2:05 a.m.•317 views

Jboss Application Server - Remote Code Execution

Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptible to a remote code execution vulnerability because the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization, thus allowing a...

9.8CVSS9.1AI score0.90713EPSS
SaveExploits14References5
Nuclei
Nuclei
•added 2026/09/23 2:05 a.m.•368 views

Oracle Access Manager - Remote Code Execution

The Oracle Access Manager portion of Oracle Fusion Middleware component: OpenSSO Agent is vulnerable to remote code execution. Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. This is an easily exploitable vulnerability that allows unauthenticated attackers with...

9.8CVSS8.2AI score0.96284EPSS
SaveExploits5References5
Rows per page
Query Builder