https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T02:59:56.109685+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1472 certfr-2026-avi-1472 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-11-09T02:59:56.266769+00:00 certfr-2026-avi-1472 https://db.gcve.eu/vuln/cleanstart-2026-hd20347 CLEANSTART-2026-HD20347 — Security fix for CVE-2026-93879 applied in: keycloak 26.8.1-r1 2026-11-09T02:59:56.266855+00:00

Affected: CleanStart: keycloak

Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details.

 https://db.gcve.eu/vuln/fkie_cve-2026-93879 fkie_cve-2026-93879 2026-11-09T02:59:56.266906+00:00

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions.

 https://db.gcve.eu/vuln/rhsa-2026:83082 RHSA-2026:83082 — Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6 release and security update 2026-11-09T02:59:56.266940+00:00

com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: Uncontrolled URI scheme resolution in Path deserialization org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Cleartext password disclosure via man-in-the-middle during initial handshake org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information Disclosure via Insecure PAM Dialog Authentication org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Silent data corruption due to character set mismatch io.micrometer/micrometer-core: Micrometer Instrumentation for Apache HttpAsyncClient: Denial of Service via asynchronous request failures io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing org.bouncycastle/bcpkix-jdk18on: org.bouncycastle/bcpkix-fips: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-lts8on: bouncycastle: Bouncy Castle: Certificate validation bypass via missing name constraint checks com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: Path traversal via incomplete type validation org.apache.freemarker/freemarker: Apache FreeMa…

 https://db.gcve.eu/vuln/ubuntu-cve-2026-93879 UBUNTU-CVE-2026-93879 2026-11-09T02:59:56.267065+00:00

Affected: Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator4-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator4-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator4-java, Ubuntu:26.10: libhibernate-validator-java, Ubuntu:26.10: libhibernate-validator4-java and 2 more

[Unknown description]

 https://db.gcve.eu/vuln/wid-sec-w-2026-4314 WID-SEC-W-2026-4314 — IBM WebSphere Application Server Liberty: Mehrere Schwachstellen 2026-11-09T02:59:56.267119+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen, um falsche Informationen darzustellen und um Informationen offenzulegen.