Medium: java-1.8.0-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20...

PT-2026-83675

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...

Amazon Linux 2023 : java-26-amazon-corretto, java-26-amazon-corretto-devel, java-26-amazon-corretto-headless (ALAS2023-2026-2101)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2101 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...

Linux Distros Unpatched Vulnerability : CVE-2026-77310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1,...

PaperCut NG/MF Unsafe Reflection Vulnerability

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained...

Amazon Linux 2 : java-11-amazon-corretto, --advisory ALAS2-2026-3879 (ALAS-2026-3879)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.32+10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3879 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produc...

java-25-openjdk-25.0.4.1-1.1 on GA media (moderate)

java-25-openjdk-25.0.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11621-1 Rating: moderate Cross-References: CVE-2026-60589 CVE-2026-61308 CVE-2026-70906 CVE-2026-70907 CVSS scores: CVE-2026-60589 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-61308 SUSE : 6.8...

Incorrect Authorization

Overview org.pac4j:pac4j-core is a pac4j is an easy and powerful security engine for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services. Affected versions of this package are vulnerable to Incorrect Authorization in the...

Exploit for CVE-2026-81578

PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit A...

Improper Certificate Validation

org.mariadb.jdbc:mariadb-java-client is vulnerable to Improper Certificate Validation. The vulnerability is due to improper certificate fingerprint validation during the initial TLS handshake, which allows an active man-in-the-middle attacker or malicious server to present a self-signed certifica...

OPENSUSE-SU-2026:11641-1 java-1_8_0-openj9-1.8.0.504-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11642-1 java-21-openj9-21.0.12.1-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11640-1 java-17-openj9-17.0.20.1-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11639-1 java-11-openj9-11.0.32.1-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11643-1 java-25-openj9-25.0.4.1-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-XVR9-35CR-46V9 org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A server can change charactersetclient mid-session to a non-UTF-8 charset, after which the driver and server interpret the same bytes under different encodings, causing silent data...

org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A server can change charactersetclient mid-session to a non-UTF-8 charset, after which the driver and server interpret the same bytes under different encodings, causing silent data...

EUVD-2026-68021

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

CVE-2026-55858 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the SendPamAuthPacketFactory process. An attacker can obtain sensitive authentication credentials by intercepting network traffic or acting as a man-in-the-middle server during the authentication...