Lucene search
K

56258 matches found

OSV
OSV
added 2025/11/05 5:15 p.m.7 views

CVE-2025-20354

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS6.1AI score0.00846EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/05 4:31 p.m.4 views

CVE-2025-20354 Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS7.5AI score0.00846EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/05 4:31 p.m.6 views

EUVD-2025-37892

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS7.3AI score0.00846EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/05 12:0 a.m.6 views

DWSurvey 安全漏洞

DWSurvey is a DWSurvey open source questionnaire system written in Java. A security vulnerability exists in DWSurvey version 6.14.0, which stems from improper access control and could lead to the deletion of additional questionnaires...

7.5CVSS6.6AI score0.00263EPSS
Exploits1References2
OPENSUSE Linux
OPENSUSE Linux
added 2025/11/05 12:0 a.m.5 views

java-1_8_0-openjdk-1.8.0.472-1.1 on GA media (moderate)

java-180-openjdk-1.8.0.472-1.1 on GA media Announcement ID: openSUSE-SU-2025:15701-1 Rating: moderate Cross-References: CVE-2025-53057 CVE-2025-53066 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

8.7CVSS7.2AI score0.00633EPSS
Exploits0
OSV
OSV
added 2025/11/04 12:0 a.m.0 views

OPENSUSE-SU-2025:15701-1 java-1_8_0-openjdk-1.8.0.472-1.1 on GA media

These are all security issues fixed in the java-180-openjdk-1.8.0.472-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.1AI score0.00633EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/03 9:3 p.m.6 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the October 2025 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

7.5CVSS6.7AI score0.00633EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/03 7:30 p.m.11 views

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002. Vulnerability Details CVEID:CVE-2025-58057 DESCRIPTION: Netty is an asynchronous...

8.1CVSS6.8AI score0.01058EPSS
Exploits2Affected Software2
GithubExploit
GithubExploit
added 2025/11/03 6:38 p.m.204 views

Exploit for Deserialization of Untrusted Data in Vmware Spring_Framework

Reporte de Vulnerabilidad - Java Store Application Resumen...

6.8CVSS7.2AI score0.08532EPSS
Exploits1
CVE
CVE
added 2025/11/03 8:2 a.m.13 views

CVE-2025-12623

CVE-2025-12623 affects the fushengqian fuint system, specifically the code path in fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java (Authentication Token Handler). The Red Hat/NVD entries describe an authorization bypass that can be triggered remotel...

3.1CVSS6.3AI score0.00314EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/03 12:0 a.m.7 views

OpenJDK 8 <= 8u462 / 11.0.0 <= 11.0.28 / 17.0.0 <= 17.0.16 / 21.0.0 <= 21.0.8 / 25.0.0 <= 25.0.0 Multiple Vulnerabilities (2025-10-21)

The version of OpenJDK installed on the remote host is 8 prior to 8u462 / 11.0.0 prior to 11.0.28 / 17.0.0 prior to 17.0.16 / 21.0.0 prior to 21.0.8 / 25.0.0 prior to 25.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025-10-21 advisory. Please Note: Java CVEs do...

7.5CVSS7.4AI score0.00633EPSS
Exploits0References4
OSV
OSV
added 2025/11/02 2:25 a.m.3 views

MINI-JVM6-3RX7-PMF9

Bulletin has no description...

4.3CVSS6.6AI score0.00419EPSS
Exploits0
GithubExploit
GithubExploit
added 2025/11/01 4:58 p.m.124 views

JavaWebVulnerabilityScanner

JavaWebVulnerabilityScanner 🔒 Java Web Vulnerability Scanner...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/01 12:0 a.m.3 views

Photon OS 4.0: Openjdk21 PHSA-2025-4.0-0896

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0896. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS7.7AI score0.00633EPSS
Exploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2025/11/01 12:0 a.m.6 views

java-25-openj9-25.0.1.0-1.1 on GA media (moderate)

java-25-openj9-25.0.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15694-1 Rating: moderate Cross-References: CVE-2025-53057 CVE-2025-61748 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

8.2CVSS7.2AI score0.00487EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2025/11/01 12:0 a.m.7 views

java-17-openj9-17.0.17.0-1.1 on GA media (moderate)

java-17-openj9-17.0.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15691-1 Rating: moderate Cross-References: CVE-2025-53057 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

8.2CVSS7.2AI score0.00487EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2025/11/01 12:0 a.m.4 views

java-21-openj9-21.0.9.0-1.1 on GA media (moderate)

java-21-openj9-21.0.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15693-1 Rating: moderate Cross-References: CVE-2025-53057 CVE-2025-61748 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

8.2CVSS7.2AI score0.00487EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2025/11/01 12:0 a.m.8 views

java-11-openj9-11.0.29.0-1.1 on GA media (moderate)

java-11-openj9-11.0.29.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15690-1 Rating: moderate Cross-References: CVE-2025-53057 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

8.2CVSS7.2AI score0.00487EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/01 12:0 a.m.5 views

Photon OS 4.0: Openjdk11 PHSA-2025-4.0-0896

An update of the openjdk11 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0896. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS7.7AI score0.00633EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/31 7:46 p.m.4 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an uncontrolled resource consumption and out of bounds write in Bouncy Castle [CVE-2025-9341, CVE-2025-9340]

Summary IBM Watson Speech Services Cartridge is vulnerable to an uncontrolled resource consumption and out of bounds write in Bouncy Castle, due to issues in AESNativeCBC.Java and AESNativeCBC.Java which allow excessive allocation CVE-2025-9341 and issues in jcajce/provider/BaseCipher...

5.9CVSS6.9AI score0.00154EPSS
Exploits0Affected Software1
Rows per page
Query Builder