https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 02:59:56 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1472 certfr-2026-avi-1472 https://db.gcve.eu/vuln/certfr-2026-avi-1472 https://db.gcve.eu/vuln/cleanstart-2026-hd20347 <p><strong>Affected:</strong> CleanStart: keycloak</p> <p>Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: keycloak</p> <p>Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details.</p> https://db.gcve.eu/vuln/cleanstart-2026-hd20347 https://db.gcve.eu/vuln/fkie_cve-2026-93879 <p>Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions.</p> <p>Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions.</p> https://db.gcve.eu/vuln/fkie_cve-2026-93879 https://db.gcve.eu/vuln/rhsa-2026:83082 <p>com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: Uncontrolled URI scheme resolution in Path deserialization org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Cleartext password disclosure via man-in-the-middle during initial handshake org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information Disclosure via Insecure PAM Dialog Authentication org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Silent data corruption due to character set mismatch io.micrometer/micrometer-core: Micrometer Instrumentation for Apache HttpAsyncClient: Denial of Service via asynchronous request failures io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing org.bouncycastle/bcpkix-jdk18on: org.bouncycastle/bcpkix-fips: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-lts8on: bouncycastle: Bouncy Castle: Certificate validation bypass via missing name constraint checks com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: Path traversal via incomplete type validation org.apache.freemarker/freemarker: Apache FreeMa…</p> <p>com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: Uncontrolled URI scheme resolution in Path deserialization org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Cleartext password disclosure via man-in-the-middle during initial handshake org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information Disclosure via Insecure PAM Dialog Authentication org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Silent data corruption due to character set mismatch io.micrometer/micrometer-core: Micrometer Instrumentation for Apache HttpAsyncClient: Denial of Service via asynchronous request failures io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing org.bouncycastle/bcpkix-jdk18on: org.bouncycastle/bcpkix-fips: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-lts8on: bouncycastle: Bouncy Castle: Certificate validation bypass via missing name constraint checks com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: Path traversal via incomplete type validation org.apache.freemarker/freemarker: Apache FreeMa…</p> https://db.gcve.eu/vuln/rhsa-2026:83082 https://db.gcve.eu/vuln/ubuntu-cve-2026-93879 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator4-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator4-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator4-java, Ubuntu:26.10: libhibernate-validator-java, Ubuntu:26.10: libhibernate-validator4-java and 2 more</p> <p>[Unknown description]</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator4-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator4-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator4-java, Ubuntu:26.10: libhibernate-validator-java, Ubuntu:26.10: libhibernate-validator4-java and 2 more</p> <p>[Unknown description]</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-93879 https://db.gcve.eu/vuln/wid-sec-w-2026-4314 <p>Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen, um falsche Informationen darzustellen und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen, um falsche Informationen darzustellen und um Informationen offenzulegen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4314