752 matches found
CVE-2026-39842 OpenRemote is Vulnerable to Expression Injection
OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...
Apache ActiveMQ 安全漏洞
Apache ActiveMQ Broker is an open source message broker and integration pattern server . A security vulnerability exists in Apache ActiveMQ Broker. The vulnerability stems from the Jolokia JMX-HTTP bridge default policy that allows exec operations on MBeans, which can be exploited by an attacker ...
Security Bulletin: SOAR App Host is using a component with a known vulnerability (CVE-2026-1188)
Summary IBM SOAR App Host uses an older version of the OMR component in OpenJ9 JVM that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 1.15.7.0 Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTIO...
MINI-JVM4-2V33-F788
Bulletin has no description...
CVE-2003-1134
Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service JVM crash, possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception...
CVE-2021-28167
In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a us...
Unprotected temporary directories in Wolfram Cloud version 14.2 may result in privilege escalation
Overview Wolfram Cloud version 14.2 allows Java Virtual Machine JVM unrestricted access to temporary resources in the /tmp/ directory of the cloud environment which may result in privilege escalation, information exfiltration, and remote code execution. In the same cloud instance, temporary...
Improper Resource Shutdown or Release
Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Resource Shutdown or Release due to the delayed cleaning of multipart upload temporary files. An attacker can cause a...
Exploit for CVE-2025-22167
README — CVE-2025-22167 Atlassian Jira For defensive us...
EUVD-2019-0543
Malware in sbrugna...
EUVD-2003-1562
Malware in sbrugna...
EUVD-2021-14860
Malware in sbrugna...
EUVD-2003-0519
Malware in sbrugna...
EUVD-2002-2262
Malware in sbrugna...
EUVD-2015-5058
Malware in sbrugna...
EUVD-2018-11996
Malware in sbrugna...
EUVD-2018-4504
Malware in sbrugna...
EUVD-2021-0835
Malware in sbrugna...