Lucene search
+L

186 matches found

OSV
OSV
added 2026/07/06 5:16 p.m.7 views

UBUNTU-CVE-2026-43825

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

7.3CVSS6.6AI score0.08796EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/07/06 3:42 p.m.9 views

CVE-2026-43825

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

7.3CVSS6.7AI score0.08796EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/06 3:42 p.m.8 views

CVE-2026-43825

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

7.3CVSS6.7AI score0.08796EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/06 3:42 p.m.8 views

EUVD-2026-41885

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

7.3CVSS6.7AI score0.08796EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/06 3:42 p.m.10 views

CVE-2026-43825 Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

7.3CVSS6.6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.21 views

PT-2026-55955

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 3.0.0-M4 Description Untrusted Java deserialization occurs in the SvmDoccatModel.deserializeInputStream function. The function uses java.io.ObjectInputStream to read an attacker-controlled stream and calls...

7.3CVSS6.3AI score0.08796EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/06/02 1:37 a.m.16 views

SUSE CVE-2026-48827

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

6.5CVSS5.8AI score0.00527EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/01 9:16 a.m.20 views

CVE-2026-48827

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

7.1CVSS0.00527EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/01 8:37 a.m.46 views

CVE-2026-48827 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

7.1CVSS0.00527EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/01 8:37 a.m.61 views

CVE-2026-48827

This CVE (CVE-2026-48827) affects Apache MINA SSHD when used as the sshd-git bundle. The vulnerability is a path traversal caused by missing path validation in git-upload-pack, git-receive-pack, and other git operations, allowing SSH-authenticated users to access repositories outside the configur...

7.1CVSS5.8AI score0.00527EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/06/01 8:37 a.m.19 views

EUVD-2026-33606

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

7.1CVSS5.8AI score0.00527EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/01 8:37 a.m.10 views

CVE-2026-48827

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

7.1CVSS5.8AI score0.00527EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/06/01 8:37 a.m.36 views

CVE-2026-48827

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

7.1CVSS5.8AI score0.00527EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.19 views

PT-2026-45380

Name of the Vulnerable Software and Affected Versions Apache MINA SSHD versions prior to 2.18.0 Apache MINA SSHD versions 3.0.0-M1 through 3.0.0-M3 Description A path traversal issue exists in the org.apache.sshd:sshd-git bundle. Due to insufficient path validation in git-upload-pack,...

7.1CVSS5.8AI score0.00527EPSS
SaveExploits0References25
RedhatCVE
RedhatCVE
added 2026/01/07 9:27 a.m.11 views

CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive...

6.1CVSS5.9AI score0.02913EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/10/24 12:0 a.m.9 views

Lightweight and Breach-Resilient Authenticated Encryption Framework for Internet of Things

The Internet of Things IoT relies heavily on resource-limited devices to communicate critical e.g., military data information under low-energy adversarial environments and low-latency wireless channels. Authenticated Encryption AE guarantees confidentiality, authenticity, and integrity, making it...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-1689

Malware in sbrugna...

7.5CVSS6.1AI score0.02957EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-1013

Malware in sbrugna...

4.6CVSS6.4AI score0.00332EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-2232

Malware in sbrugna...

4.9CVSS7.3AI score0.00393EPSS
SaveExploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-3069

Malware in sbrugna...

4.6CVSS6.4AI score0.00471EPSS
SaveExploits0References7
Rows per page
Query Builder