Search
2,567 results- MEDIUM6.5CVE-2026-44596Yamcs has No Rate Limiting on Authentication Endpoint
- MEDIUM4.3CVE-2026-44595Yamcs vulnerable to unauthorized user enumeration via IAM API endpoints
- MEDIUM4.3CVE-2026-42568Yamcs Vulnerable to LDAP Injection in LdapAuthModule
- MEDIUM5.5CVE-2026-45581fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode
- MEDIUM6.5CVE-2026-37979Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass
- MEDIUM5.3CVE-2026-45292EPSS 0.06%OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation
- MEDIUM5.3CVE-2026-45205EPSS 0.13%Apache Commons Configuration: StackOverflowError for YAML input with cycles
- MEDIUM5.3CVE-2026-6860EPSS 0.01%Vert.x has a DoS via unbounded server-side SNI SslContext cache growth
- MEDIUM6.1CVE-2023-42345EPSS 0.07%Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp
- MEDIUM6.1CVE-2023-42343EPSS 0.19%Alkacon OpenCms is vulnerable to XSS via cmis-online/type
- MEDIUM4.4CVE-2026-41004EPSS 0.01%Spring Cloud Config Server Logged Sensitive Information
- MEDIUM5.3CVE-2026-44248EPSS 0.02%Netty MQTT: Resource exhaustion in MqttDecoder
- MEDIUM6.8CVE-2026-42586EPSS 0.01%Netty Redis Codec Encoder has a CRLF Injection Issue
- MEDIUM6.5CVE-2026-42585EPSS 0.01%Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
- MEDIUM5.8CVE-2026-42581EPSS 0.02%Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
- MEDIUM6.5CVE-2026-42580EPSS 0.02%Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
- MEDIUM6.5CVE-2026-43975EPSS 0.62%Apache Wicket has a Path Traversal issue
- MEDIUM6.1CVE-2026-42509EPSS 0.18%Apache Wicket has a Cross-site Scripting issue
- MEDIUM4.4CVE-2026-42140EPSS 0.03%XWiki PlantUML Macro Vulnerable to Server-Side Request Forgery (SSRF) via 'server' parameter
- MEDIUM5.3CVE-2026-41417EPSS 0.02%Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection
- MEDIUM6.5CVE-2026-42404EPSS 0.04%Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API
- MEDIUM5.4CVE-2026-36766EPSS 0.03%Shopizer is vulnerable to Cross-site Scripting
- MEDIUM5.4CVE-2026-7500EPSS 0.03%Keycloak has a Forced Browsing issue
- MEDIUM4.3CVE-2026-42525EPSS 0.04%Jenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerability
- MEDIUM4.3CVE-2026-42522EPSS 0.02%Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
Page 1 of 103Next →