Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Tag: java Clear
ID Title
CVE-2026-55860 Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.1` or later.
CVE-2026-55859 Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.1` or later.
CVE-2026-55858 Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858). Data can be tampered with by attackers. Mitigation: upgrade to `2.7.14` or later.
CVE-2026-55857 Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
CVE-2026-55856 Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
CVE-2026-55848 XXE (XML External Entity) in org.mapfish.print:print-lib (CVE-2026-55848)
vulnerability in org.mapfish.print:print-lib (CVE-2026-55848). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.5` or later.
CVE-2026-55867 Vulnerability in org.graylog2:graylog2-server (CVE-2026-55867)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55867). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2` or later.
CVE-2026-55841 Vulnerability in org.graylog2:graylog2-server (CVE-2026-55841)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55841). Data can be tampered with by attackers. Mitigation: upgrade to `7.1.2` or later.
CVE-2026-55425 Vulnerability in org.graylog2:graylog2-server (CVE-2026-55425)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55425). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.4` or later.
CVE-2026-55565 Code Injection in org.yamcs:yamcs-core (CVE-2026-55565)
code injection in org.yamcs:yamcs-core (CVE-2026-55565). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55559 Code Injection in org.yamcs:yamcs-core (CVE-2026-55559)
code injection in org.yamcs:yamcs-core (CVE-2026-55559). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/instances`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55552 Path Traversal in org.yamcs:yamcs-core (CVE-2026-55552)
path traversal in org.yamcs:yamcs-core (CVE-2026-55552). Confidential information can be exposed externally. Mitigation: upgrade to `5.12.0` or later.
CVE-2026-55549 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55549)
cross-site scripting in org.yamcs:yamcs-core (CVE-2026-55549). Confidential information can be exposed externally. Exploitable via ``fetch``. Mitigation: upgrade to `5.9.4` or later.
CVE-2026-55547 Vulnerability in org.yamcs:yamcs-core (CVE-2026-55547)
vulnerability in org.yamcs:yamcs-core (CVE-2026-55547). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/roles`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55511 Code Injection in org.yamcs:yamcs-core (CVE-2026-55511)
code injection in org.yamcs:yamcs-core (CVE-2026-55511). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-82078 Vulnerability in CVE-2026-82078 (CVE-2026-82078)
vulnerability in CVE-2026-82078 (CVE-2026-82078). Risk of unauthorized operations or information disclosure.
CVE-2026-59292 Vulnerability in CVE-2026-59292 (CVE-2026-59292)
vulnerability in CVE-2026-59292 (CVE-2026-59292). Risk of unauthorized operations or information disclosure.
CVE-2026-55758 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55758)
SSRF in ssrf (CVE-2026-55758). Risk of unauthorized operations or information disclosure.
CVE-2026-59278 SSRF (Server-Side Request Forgery) in csharp (CVE-2026-59278)
SSRF in csharp (CVE-2026-59278). Risk of unauthorized operations or information disclosure.
CVE-2026-47864 Unsafe Deserialization in deserialization (CVE-2026-47864)
vulnerability in deserialization (CVE-2026-47864). Confidential information can be exposed externally.
CVE-2026-47851 Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...
Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...
CVE-2026-75331 Unrestricted File Upload in CVE-2026-75331 (CVE-2026-75331)
vulnerability in CVE-2026-75331 (CVE-2026-75331). Risk of unauthorized operations or information disclosure.
CVE-2026-75328 Path Traversal in CVE-2026-75328 (CVE-2026-75328)
path traversal in CVE-2026-75328 (CVE-2026-75328). Confidential information can be exposed externally.
CVE-2026-75414 Vulnerability in CVE-2026-75414 (CVE-2026-75414)
vulnerability in CVE-2026-75414 (CVE-2026-75414). Risk of unauthorized operations or information disclosure.
CVE-2026-75415 Vulnerability in CVE-2026-75415 (CVE-2026-75415)
vulnerability in CVE-2026-75415 (CVE-2026-75415). Risk of unauthorized operations or information disclosure.
CVE-2026-75327 Vulnerability in CVE-2026-75327 (CVE-2026-75327)
vulnerability in CVE-2026-75327 (CVE-2026-75327). Risk of unauthorized operations or information disclosure.
CVE-2026-71054 Vulnerability in c (CVE-2026-71054)
vulnerability in c (CVE-2026-71054). Risk of unauthorized operations or information disclosure.
CVE-2026-54550 Path Traversal in org.codehaus.izpack:izpack-installer (CVE-2026-54550)
path traversal in org.codehaus.izpack:izpack-installer (CVE-2026-54550). Data can be tampered with by attackers. Exploitable via ``targetPath``.
CVE-2026-38469 Vulnerability in CVE-2026-38469 (CVE-2026-38469)
vulnerability in CVE-2026-38469 (CVE-2026-38469). Risk of unauthorized operations or information disclosure.
CVE-2026-79675 Vulnerability in CVE-2026-79675 (CVE-2026-79675)
vulnerability in CVE-2026-79675 (CVE-2026-79675). Successful exploitation can lead to full system takeover.
CVE-2026-77310 SSRF (Server-Side Request Forgery) in csharp (CVE-2026-77310)
SSRF in csharp (CVE-2026-77310). Risk of unauthorized operations or information disclosure.
CVE-2026-78323 Vulnerability in CVE-2026-78323 (CVE-2026-78323)
vulnerability in CVE-2026-78323 (CVE-2026-78323). Confidential information can be exposed externally.
CVE-2026-78166 Vulnerability in CVE-2026-78166 (CVE-2026-78166)
vulnerability in CVE-2026-78166 (CVE-2026-78166). Risk of unauthorized operations or information disclosure.
CVE-2026-78140 Vulnerability in CVE-2026-78140 (CVE-2026-78140)
vulnerability in CVE-2026-78140 (CVE-2026-78140). Risk of unauthorized operations or information disclosure.
CVE-2026-62243 Vulnerability in CVE-2026-62243 (CVE-2026-62243)
vulnerability in CVE-2026-62243 (CVE-2026-62243). Confidential information can be exposed externally. Mitigation: upgrade to `4.2.17.Final` or later.
CVE-2026-76904 SQL Injection in org.geotools.jdbc:gt-jdbc-postgis (CVE-2026-76904)
SQL injection in org.geotools.jdbc:gt-jdbc-postgis (CVE-2026-76904). Successful exploitation can lead to full system takeover. Exploitable via ``jsonArrayContains``. Mitigation: upgrade to `33.6` or later.
CVE-2026-63490 Path Traversal in CVE-2026-63490 (CVE-2026-63490)
path traversal in CVE-2026-63490 (CVE-2026-63490). Confidential information can be exposed externally.
CVE-2026-76576 Path Traversal in vue (CVE-2026-76576)
path traversal in vue (CVE-2026-76576). Risk of unauthorized operations or information disclosure.
CVE-2026-75596 Vulnerability in CVE-2026-75596 (CVE-2026-75596)
vulnerability in CVE-2026-75596 (CVE-2026-75596). Risk of unauthorized operations or information disclosure.
CVE-2026-76224 Code Injection in CVE-2026-76224 (CVE-2026-76224)
code injection in CVE-2026-76224 (CVE-2026-76224). Successful exploitation can lead to full system takeover.
CVE-2026-75987 Vulnerability in deserialization (CVE-2026-75987)
vulnerability in deserialization (CVE-2026-75987). Risk of unauthorized operations or information disclosure.
CVE-2026-75979 Vulnerability in CVE-2026-75979 (CVE-2026-75979)
vulnerability in CVE-2026-75979 (CVE-2026-75979). Risk of unauthorized operations or information disclosure.
CVE-2026-75978 Vulnerability in c (CVE-2026-75978)
vulnerability in c (CVE-2026-75978). Risk of unauthorized operations or information disclosure.
CVE-2026-70907 Vulnerability in c (CVE-2026-70907)
vulnerability in c (CVE-2026-70907). Risk of unauthorized operations or information disclosure.
CVE-2026-70906 Vulnerability in c (CVE-2026-70906)
vulnerability in c (CVE-2026-70906). Risk of unauthorized operations or information disclosure.
CVE-2026-70681 Vulnerability in c (CVE-2026-70681)
vulnerability in c (CVE-2026-70681). Successful exploitation can lead to full system takeover.
CVE-2026-61308 Vulnerability in c (CVE-2026-61308)
vulnerability in c (CVE-2026-61308). Confidential information can be exposed externally.
CVE-2026-60589 Information Disclosure in c (CVE-2026-60589)
vulnerability in c (CVE-2026-60589). Risk of unauthorized operations or information disclosure.
CVE-2026-75935 Vulnerability in Amazon aws (CVE-2026-75935)
vulnerability in Amazon aws (CVE-2026-75935). Risk of unauthorized operations or information disclosure.
CVE-2026-75936 Vulnerability in dos (CVE-2026-75936)
vulnerability in dos (CVE-2026-75936). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →