org.apache.camel:camel-itest-spring32 (>=2.16.1, <=2.16.5), org.apache.cxf.systests:cxf-systests-uncategorized (>=3.0.7, <=3.0.11) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.14.release)

org.springframework:spring-jms MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring32 =2.16.1, =3.0.7, =3.0.0-beta5, =3.0.0-rc1, =3.1.0...

org.apache.cxf.systests:cxf-systests-uncategorized (>=3.2.8, <=3.2.9), org.springframework.boot:spring-boot-starter-activemq (1.5.19.release) +2 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.22.release)

org.springframework:spring-jms MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized =3.2.8, =3.2.9 -...

org.apache.cxf.systests:cxf-systests-uncategorized (3.2.14), org.finra.herd:herd-dao (>=0.130.0, <=0.157.0) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.27.release)

org.springframework:spring-jms MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.2.14 - org.finra.herd:herd-dao...

org.apache.cxf.systests:cxf-systests-jaxrs (4.2.0), org.apache.cxf.systests:cxf-systests-transport-jms (4.2.0) +4 more potentially affected by CVE-2025-48913 +1 more via org.apache.cxf:cxf-rt-transports-jms (4.2.0)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 4.2.0 -...

FreeType: undisclosed vulnerability (ZAI-2026-J2ATL4)

Not disclosed. Details are not yet publicly disclosed...

EUVD-2006-2036

Malware in sbrugna...

EUVD-2025-10685

Malicious code in bioql PyPI...

EUVD-2024-19252

Malicious code in bioql PyPI...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.11), org.apache.cxf.systests:cxf-systests-transports (2.3.11) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.3.11)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.11 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.4.9), org.apache.cxf.systests:cxf-systests-transport-jms (2.4.9) +5 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.4.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.4.9 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.10), org.apache.cxf.systests:cxf-systests-transports (2.3.10) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.3.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.10 -...

org.apache.camel:camel-example-cxf (2.5.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.2.11) +13 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2.11)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.5.0 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.systests:cxf-systests-jaxrs (2.4.5), org.apache.cxf.systests:cxf-systests-transport-jms (2.4.5) +5 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.4.5)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.4.5 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.9), org.apache.cxf.systests:cxf-systests-transports (2.3.9) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.3.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.9 -...

CVE-2025-53529

WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profilefuncionario.php endpoint. The idfuncionario parameter is not properly sanitized or validated before being used in a SQL query, allowing an unauthenticated attacker to...

CVE-2024-6398

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because oth...

WordPress Insert HTML Here plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Insert HTML Here versions = 1.0...

Exploit for CVE-2024-3673

CVE-2024-3673 CVE-2024-3673 Exploit: Local File Inclusion in W...

CVE-2024-6398

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because oth...

K000139692: Websense vulnerabilities CVE-2006-2035 and CVE-2010-5144

Security Advisory Description CVE-2006-2035 Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL. CVE-2010-5144 The ISAPI Filter plug-in in Websense Enterprise...