261897 matches found
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
SUSE CVE-2026-49356
Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...
CVE-2026-10050
creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:03+00:00| published-proof-of-concept| https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr 2026-08-09 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msmm66wcux2o...
PT-2026-64161
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.5 MOVEit Transfer versions 2026.0.0 through 2026.0.2 Description Progress MOVEit Transfer contains a permissive cross-domain security policy that allows interaction with untrusted domains. This...
UBUNTU-CVE-2026-50583
Unknown description...
PT-2026-63607
Name of the Vulnerable Software and Affected Versions Joomla Extension - regularlabs.com - GeoIP extension affected versions not specified Description MaxMind credentials are leaked through request URLs, leading to a credential leakage issue. Recommendations At the moment, there is no information...
The vulnerability of the Glances monitoring tool, related to insufficient validation of requests on the server side, allows a perpetrator to gain unauthorized access to protected information or perform an SSRF attack.
The vulnerability of the Glances monitoring tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or perform an SSRF attack...
The vulnerability of the jv_object_merge_recursive() function in the jq JSON processing tool allows a attacker to cause a service failure.
The vulnerability of the jvobjectmergerecursive function in the jq JSON processing tool is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-64187
Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...
CVE-2026-60367
creationtimestamp| type| source ---|---|--- 2026-07-22 23:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbikr4j5g2j 2026-07-23 00:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmjkocd42q 2026-07-23 02:00:17+00:00| seen|...
CVE-2026-61246
CVE-2026-61246 affects Oracle Platform Security for Java (Oracle Fusion Middleware) - Centralized Thirdparty Jars. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access and can lead to takeover of Oracle Platform Security for Java. Affected versions are 12.2....
CVE-2026-60439
...
CVE-2026-60372
CVE-2026-60372 concerns the Oracle Platform Security for Java component of Oracle Fusion Middleware, specifically the Centralized Thirdparty Jars. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise...
CVE-2026-60373
...
CVE-2026-60370
CVE-2026-60370 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to ...
CVE-2026-60369
CVE-2026-60369 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access over HTTP and low privileges can compromise the affected product, with pote...
CVE-2026-60367
...
CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-15043 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-15043 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...