65124 matches found
CVE-2026-24330
A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...
CVE-2026-24330
A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...
java-1.8.0-openjdk security update
1:1.8.0.502.b07-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.502.b07-1.1 - Update to 8u502-b07 GA. - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 ...
PT-2026-70937
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables,...
This Week in Spring - August 11th, 2026
Hi, Spring fans! Welcome back to another lively edition of This Week in Spring! So much is always happening in the Spring world, and that’s part of what makes it so fun to follow. One of my favorite things is how much the community contributes and how great it is to connect with everyone. In earl...
CVE-2026-58235: Dependency on Vulnerable Third-Party Component
SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...
PT-2026-70938
Name of the Vulnerable Software and Affected Versions Kestra versions prior to 2.0.0 Description An issue exists where the http function in HttpFunction.java passes a user-controlled URI argument to URI.create and the server-side HTTP client. Because the system does not restrict private, loopback...
java-1_8_0-openj9-1.8.0.502-1.1 on GA media (moderate)
java-180-openj9-1.8.0.502-1.1 on GA media Announcement ID: openSUSE-SU-2026:11487-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-46968 CVE-2026-47021 CVE-2026-47058 CVE-2026-47063 CVE-2026-60147 CVSS scores: CVE-2026-16439 SUSE : 7.7...
java-25-openj9-25.0.4.0-1.1 on GA media (moderate)
java-25-openj9-25.0.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11489-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
java-17-openj9-17.0.20.0-1.1 on GA media (moderate)
java-17-openj9-17.0.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11486-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
java-21-openj9-21.0.12.0-1.1 on GA media (moderate)
java-21-openj9-21.0.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11488-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
java-11-openj9-11.0.32.0-1.1 on GA media (moderate)
java-11-openj9-11.0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11485-1 Rating: moderate Cross-References: CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47027 CVE-2026-47057 CVE-2026-47059 CVSS scores: CVE-2026-16439 SUSE : 7.7...
Apache Tomcat 11.0.2 Remote Code Execution
A proof of concept exploit for an unauthenticated remote code execution vulnerability in Apache Tomcat version 11.0.2. The vulnerability abuses partial PUT path equivalence to place a crafted Java serialized session file where a PersistentManager with FileStore can load it, resulting in unsafe Ja...
pt-platform__java-goof-1
Java Goof A vulnerable demo application, initially based on...
pt-identity__vulnerable-app
Spring4Shell Vulnerable Demo App This repository creates a doc...
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow due to the July 2026 CPU
Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...
Important: Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update
An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score...
Important: Red Hat Security Advisory: java-1.8.0-ibm security update
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server
A flaw was found in the ORB Object Request Broker component of IBM SDK, Java Technology Edition. A malicious IIOP Internet Inter-ORB Protocol server could exploit this vulnerability to force the loading and creation of unauthorized software components. This could lead to the execution of arbitrar...
