Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2013-4590 | 4.3 medium | 9.0% | apache, debian, tomcat, debian_linux, solaris | Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | 9 Oct |
| CVE-2015-4844 | 10.0 high | 8.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | 14 Oct |
| CVE-2018-14720 | 9.8 critical | 8.0% | fasterxml, debian, jackson-databind, debian_linux, banking_platform | FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization. | 15 Oct |
| CVE-2019-9636 | 9.8 critical | 8.0% | python, fedoraproject, fedora, leap | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9. | 14 Oct |
| CVE-2017-15095 | 9.8 critical | 8.0% | fasterxml, debian, jackson-databind, debian_linux, openshift_container_platform | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. | 8 Oct |
| CVE-2016-9841 | 9.8 critical | 8.0% | zlib, opensuse, leap | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | 8 Oct |
| CVE-2020-27619 | 9.8 critical | 8.0% | python, fedoraproject, fedora, communications_cloud_native_core_network_function_cloud_native_environment | In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP. | 8 Oct |
| CVE-2019-14379 | 9.8 critical | 8.0% | fasterxml, debian, jackson-databind, debian_linux, active_iq_unified_manager | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution. | 8 Oct |
| CVE-2022-25762 | 8.6 high | 8.0% | apache, oracle, tomcat, agile_product_lifecycle_management | If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors. | 8 Oct |
| CVE-2020-35491 | 8.1 high | 8.0% | fasterxml, netapp, jackson-databind, service_level_manager, debian_linux | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. | 8 Oct |
| CVE-2020-14062 | 8.1 high | 8.0% | fasterxml, netapp, jackson-databind, active_iq_unified_manager, steelstore_cloud_integrated_storage | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2). | 8 Oct |
| CVE-2020-7595 | 7.5 high | 8.0% | xmlsoft, fedoraproject, libxml2, fedora, ubuntu_linux | xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. | 14 Oct |
| CVE-2019-19926 | 7.5 high | 8.0% | sqlite, siemens, sinec_infrastructure_network_services, mysql_workbench | multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. | 14 Oct |
| CVE-2020-11979 | 7.5 high | 8.0% | apache, gradle, ant, fedora | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process. | 8 Oct |
| CVE-2016-6797 | 7.5 high | 8.0% | apache, oracle, tomcat, tekelec_platform_distribution, debian_linux | The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not. | 8 Oct |
| CVE-2016-6796 | 7.5 high | 8.0% | apache, debian, tomcat, debian_linux, oncommand_insight | A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet. | 8 Oct |
| CVE-2016-0762 | 5.9 medium | 8.0% | apache, canonical, tomcat, ubuntu_linux, debian_linux | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder. | 8 Oct |
| CVE-2016-0494 | 10.0 high | 7.0% | canonical, oracle, ubuntu_linux, jdk, jre | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | 15 Oct |
| CVE-2015-4760 | 10.0 high | 7.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | 14 Oct |
| CVE-2019-19646 | 9.8 critical | 7.0% | sqlite, siemens, sinec_infrastructure_network_services, tenable.sc | pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. | 14 Oct |
| CVE-2019-5481 | 9.8 critical | 7.0% | haxx, fedoraproject, curl, fedora, cloud_backup | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. | 14 Oct |
| CVE-2021-29921 | 9.8 critical | 7.0% | python, oracle, communications_cloud_native_core_automated_test_suite, communications_cloud_native_core_binding_support_function | In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses. | 8 Oct |
| CVE-2021-22945 | 9.1 critical | 7.0% | haxx, fedoraproject, libcurl, fedora, cloud_backup | When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*. | 14 Oct |
| CVE-2019-19925 | 7.5 high | 7.0% | sqlite, siemens, sinec_infrastructure_network_services, mysql_workbench | zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. | 14 Oct |
| CVE-2019-19923 | 7.5 high | 7.0% | sqlite, siemens, sinec_infrastructure_network_services, mysql_workbench | flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). | 14 Oct |
| CVE-2019-19880 | 7.5 high | 7.0% | sqlite, netapp, cloud_backup, debian_linux | exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. | 14 Oct |
| CVE-2018-20843 | 7.5 high | 7.0% | libexpat_project, canonical, libexpat, ubuntu_linux, debian_linux | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks). | 14 Oct |
| CVE-2021-40690 | 7.5 high | 7.0% | apache, debian, santuario_xml_security_for_java, cxf, tomee | All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element. | 8 Oct |
| CVE-2021-37137 | 7.5 high | 7.0% | netty, oracle, banking_apis, banking_digital_experience | The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk. | 8 Oct |
| CVE-2021-37714 | 7.5 high | 7.0% | jsoup, quarkus, banking_trade_finance | jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes. | 8 Oct |
| CVE-2018-12022 | 7.5 high | 7.0% | fasterxml, debian, jackson-databind, debian_linux, fedora | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload. | 8 Oct |
| CVE-2016-6794 | 5.3 medium | 7.0% | apache, debian, tomcat, debian_linux, jboss_enterprise_web_server | When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible. | 15 Oct |
| CVE-2020-28500 | 5.3 medium | 7.0% | lodash, oracle, banking_corporate_lending_process_management, banking_credit_facilities_process_management | Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions. | 8 Oct |
| CVE-2019-13057 | 4.9 medium | 7.0% | openldap, canonical, ubuntu_linux, debian_linux | An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.) | 14 Oct |
| CVE-2015-4883 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860. | 14 Oct |
| CVE-2015-4881 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835. | 14 Oct |
| CVE-2015-4860 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883. | 14 Oct |
| CVE-2015-4835 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881. | 14 Oct |
| CVE-2015-4805 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization. | 14 Oct |
| CVE-2015-4732 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590. | 14 Oct |
| CVE-2015-4731 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. | 14 Oct |
| CVE-2015-2638 | 10.0 high | 6.0% | oracle, jdk, jre, javafx | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | 14 Oct |
| CVE-2015-2628 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. | 14 Oct |
| CVE-2015-0469 | 10.0 high | 6.0% | oracle, jdk, jre | Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | 14 Oct |
| CVE-2019-16942 | 9.8 critical | 6.0% | fasterxml, debian, jackson-databind, debian_linux, fedora | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling. | 8 Oct |
| CVE-2018-11307 | 9.8 critical | 6.0% | fasterxml, redhat, jackson-databind, openshift_container_platform, clusterware | An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6. | 8 Oct |
| CVE-2019-3857 | 8.8 high | 6.0% | libssh2, debian, debian_linux, ontap_select_deploy_administration_utility | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. | 14 Oct |
| CVE-2019-3856 | 8.8 high | 6.0% | libssh2, debian, debian_linux, ontap_select_deploy_administration_utility | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. | 14 Oct |
| CVE-2020-35490 | 8.1 high | 6.0% | fasterxml, netapp, jackson-databind, service_level_manager, debian_linux | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource. | 8 Oct |
| CVE-2020-11620 | 8.1 high | 6.0% | fasterxml, debian, jackson-databind, debian_linux, active_iq_unified_manager | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly). | 8 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.