CVEs
Browse the synced catalog, newest first.
- CVE-2026-97849Apache TomEE: Derby network service listens on all interfacesApache Software Foundation org.apache.openejb:openejb-derby…
- CVE-2026-97867Apache TomEE: Database credential disclosure via remote JNDI lookupApache Software Foundation org.apache.openejb:openejb-ejbd…
- CVE-2026-108187Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network…Zoom Communications Zoom Workplace
- CVE-2026-97870Apache TomEE: Missing authentication for Hessian endpoints in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-hessi…
- CVE-2026-97872Apache TomEE: Authentication bypass of Hessian EJB endpoints due to ignored security settingsApache Software Foundation org.apache.openejb:openejb-hessi…
- CVE-2026-97874Apache TomEE: Authentication bypass for Hessian endpoints in non-root web applicationsApache Software Foundation org.apache.openejb:openejb-hessi…
- CVE-2026-121683Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete…Ivanti Cloud Services Application
- CVE-2026-97880Apache TomEE: Authentication bypass in the embedded HTTP server for endpoints protected by HTTP Basic authenticationApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-97881Apache TomEE: Path traversal in embedded HTTP server static resource handlingApache Software Foundation org.apache.tomee:openejb-http
- CVE-2026-108186Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via…Zoom Communications Zoom Workplace
- CVE-2026-97888Apache TomEE: Caller identity leaks across requests in embedded HTTP serverApache Software Foundation org.apache.tomee:openejb-http
- CVE-2026-97890Apache TomEE: Session fixation in embedded HTTP serverApache Software Foundation org.apache.tomee:openejb-http
- CVE-2026-111239Apache TomEE: Code execution by any authenticated user via the SSH administration shellApache Software Foundation org.apache.openejb:openejb-ss… +2
- CVE-2026-111240Apache TomEE: Authentication bypass for accounts without a stored password in SQL login moduleApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-18128Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote…ivanti Endpoint Manager
- CVE-2026-111241Apache TomEE: Local code execution via predictable passivation files in the shared temporary directoryApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-11315A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3).mackron dr_libs
- CVE-2026-11316A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5).mackron dr_libs
- CVE-2026-111242Apache TomEE: Privilege escalation via leaked MicroProfile JWT run-as identityApache Software Foundation org.apache.tomee:mp-jwt
- CVE-2026-111243Apache TomEE: Expired MicroProfile JWT tokens accepted with negative clock skewApache Software Foundation org.apache.tomee:mp-jwt
- CVE-2026-121653SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote…ivanti Endpoint Manager
- CVE-2026-111244Apache TomEE: Authorization bypass in MicroProfile JWT role checks for JAX-RS resourcesApache Software Foundation org.apache.tomee:mp-jwt
- CVE-2026-105813Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another…Ivanti User Workspace Manager
- CVE-2026-111245Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requestsApache Software Foundation org.apache.openejb:openejb-cxf ·…
- CVE-2026-111246Apache TomEE: HTTP sessions shared across web applications in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-111247Apache TomEE: Privilege escalation via user name matching a role nameApache Software Foundation org.apache.tomee:tomee-catalina
- CVE-2026-125759Nango before 0.71.3 SQL Injection via Orchestrator Task Group KeyNangoHQ nango
- CVE-2026-125758Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRETaptabase
- CVE-2026-125757mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footermailcow: dockerized
- CVE-2026-125756postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncationpostalsys postal-mime