Lucene search
+L

19 matches found

SUSE CVE
SUSE CVE
•added 2026/10/07 4:28 p.m.•7 views

SUSE CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

5.9CVSS5.9AI score0.00279EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-94114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker- controlled classes under their self-declared names without...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 8:17 p.m.•17 views

CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS0.00279EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/10/06 8:17 p.m.•13 views

AZL-108017 CVE-2026-94114 affecting package bcel 5.2-37

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/06 8:17 p.m.•20 views

DEBIAN-CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/06 8:17 p.m.•11 views

CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/10/06 8:17 p.m.•21 views

UBUNTU-CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/06 7:42 p.m.•15 views

CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0
EUVD
EUVD
•added 2026/10/06 7:42 p.m.•12 views

EUVD-2026-93970

Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-94114: Symbolic Name not Mapping to Correct Object

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

8.2CVSS5.9AI score0.00279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•16 views

PT-2026-107219

Name of the Vulnerable Software and Affected Versions Apache Commons BCEL versions prior to 6.13.0 Description BCEL caches attacker-controlled classes under their self-declared names without validating the requested name. This allows subsequent lookups and name-keyed verification results to refer...

8.2CVSS5.8AI score0.00279EPSS
SaveExploits0References27
BDU FSTEC
BDU FSTEC
•added 2026/08/25 12:00 a.m.•20 views

Linux Kernel x2apic_uv_x DoS

The vulnerability of the uvsysteminithub function in the arch/x86/kernel/apic/x2apicuvx.c module, which is part of the Linux kernel support for x86 platforms, stems from the use of a symbolic name that refers to an incorrect object. Exploiting this vulnerability could allow an attacker to trigger...

5.5CVSS6AI score0.00162EPSS
SaveExploits0References11Affected Software3
CNVD
CNVD
•added 2022/04/13 12:00 a.m.•75 views

Jenkins CVS Plugin Cross-Site Scripting Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.A cross-site scripting vulnerability exists in the Jenkins CVS Plugin, which stems from the application not escaping the na...

5.4CVSS0.7AI score0.00689EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/12 8:15 p.m.•10 views

CVE-2022-29037

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS6AI score0.00689EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/04/12 8:15 p.m.•18 views

CVE-2022-29037

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS6AI score0.00689EPSS
SaveExploits0References1
Mend
Mend
•added 2022/04/12 7:50 p.m.•9 views

CVE-2022-29037

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00689EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•17 views

Jenkins cross-site scripting vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.A cross-site scripting vulnerability exists in the Jenkins CVS Plugin, which stems from the application not escaping the na...

5.4CVSS5.3AI score0.00689EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•9 views

CVE-2022-29037: Improper Neutralization of Input During Web Page Generation

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.9AI score0.00689EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/05/20 12:00 a.m.•21 views

Android Privilege Escalation

The vulnerability of the libbacktrace/Backtrace.cpp function in the Android operating system’s debugger component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges through an application that...

9.3CVSS7.2AI score0.00411EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder