11 matches found
cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.soap:cloud-altemistafwk-core-soap-wss (>=3.0.0.release, <=3.1.0.release) +507 more potentially affected by CVE-2026-95616 via org.apache.wss4j:wss4j-ws-security-common (>=2.0.0, <=2.4.3)
org.apache.wss4j:wss4j-ws-security-common MAVEN version =2.0.0, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =6.2.12, =2.2.4, =2.2.4, =2.2.4, =4.11.0, =4.11.0, =4.11.0, =4.11.2 and more Source cves: CVE-2026-95616 Source advisory: MEND:CVE-2026-95616...
com.genexus:gamutils (>=4.12.0, <=4.14.5), com.genexus:gxawsserverless (>=4.12.0, <=4.14.5) +199 more potentially affected by CVE-2026-95616 via org.apache.wss4j:wss4j-ws-security-common (>=3.0.0, <=3.0.5)
org.apache.wss4j:wss4j-ws-security-common MAVEN version =3.0.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.14.5 and more Source cves: CVE-2026-95616 Source advisory: MEND:CVE-2026-95616...
com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0) +158 more potentially affected by CVE-2026-95616 via org.apache.wss4j:wss4j-ws-security-common (>=4.0.0, <=4.0.1)
org.apache.wss4j:wss4j-ws-security-common MAVEN version =4.0.0, =1.0.0, =0.9.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.4.0, =4.0.0, =4.0.0, =4.0.0, =4.0.2, =4.0.2, =4.7.0 and more Source cves: CVE-2026-95616 Source advisory: MEND:CVE-2026-95616...
com.genexus:gamutils (>=4.12.0, <=4.14.5), com.genexus:gxawsserverless (>=4.12.0, <=4.14.5) +199 more potentially affected by CVE-2026-85532 via org.apache.wss4j:wss4j-ws-security-common (>=3.0.0, <=3.0.5)
org.apache.wss4j:wss4j-ws-security-common MAVEN version =3.0.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.12.0, =4.14.5 and more Source cves: CVE-2026-85532 Source advisory: MEND:CVE-2026-85532...
cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.soap:cloud-altemistafwk-core-soap-wss (>=3.0.0.release, <=3.1.0.release) +507 more potentially affected by CVE-2026-85532 via org.apache.wss4j:wss4j-ws-security-common (>=2.0.0, <=2.4.3)
org.apache.wss4j:wss4j-ws-security-common MAVEN version =2.0.0, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =6.2.12, =2.2.4, =2.2.4, =2.2.4, =4.11.0, =4.11.0, =4.11.0, =4.11.2 and more Source cves: CVE-2026-85532 Source advisory: MEND:CVE-2026-85532...
com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0) +158 more potentially affected by CVE-2026-85532 via org.apache.wss4j:wss4j-ws-security-common (>=4.0.0, <=4.0.1)
org.apache.wss4j:wss4j-ws-security-common MAVEN version =4.0.0, =1.0.0, =0.9.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.4.0, =4.0.0, =4.0.0, =4.0.0, =4.0.2, =4.0.2, =4.7.0 and more Source cves: CVE-2026-85532 Source advisory: MEND:CVE-2026-85532...
CVE-2026-9658 Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths
Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header injections in the request paths unless they were double-encoded, for example, GET /path\r\nHTTP/1.1\r\nHost:...
CVE-2026-9658: Improper Filtering of Special Elements
Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header injections in the request paths unless they were double-encoded, for example, GET /path\r\nHTTP/1.1\r\nHost:...
Plack::Middleware::Security::Common security vulnerabilities
Plack::Middleware::Security::Common is a Perl web application security header middleware developed by RRWO’s individual developers. Versions of Plack::Middleware::Security::Common prior to 0.13.1 contained security vulnerabilities. These vulnerabilities stemmed from ineffective header injection...
Debian: Security Advisory (DLA-34-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
