405,382 results · Feed
-
Medium 6.7
Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticate…
-
Medium 5.5
A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated …
-
Medium 5.5
An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 1…
-
Low 2.3
Uncontrolled XML entity expansion in the Flock Installer app for Android
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running And…
-
Medium 6.7
Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with…
-
Medium 5.9
Information exposure in Flock Safety Platform public access-list sign-up
An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license…
-
High 7.2CVE-2026-105425 Public exploit
OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versi…
-
High 7.1
Cross-organization access to saved-search alerts in FlockOS
Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-28, allowed an authenticated user with permission to manage saved searches in their own organization to read, modify or delete another…
-
High 8.6
In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provide…
-
Unscored —
Apache TomEE: EJB method authorization is silently skipped on JDK 21+
Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access restrictions being enforced. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the iss…
-
Unscored —
The embedded OpenEJB HTTP server does not limit the size of incoming request bodies or of multipart requests, and does …
-
Unscored —
The remote EJB client does not verify that the hostname of the server it connects to matches the server's TLS certifica…
-
Unscored —
The embedded Derby network service ignores its configured bind address and listens on all network interfaces. When the …
-
Unscored —
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that …
-
High 8.1
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of pri…
-
Unscored —
When Hessian remoting endpoints are served by the embedded HTTP server, configured authentication and transport securit…
-
Unscored —
When an EJB is exposed over the optional Hessian protocol inside an existing web application, some configured authentic…
-
Unscored —
When Hessian remoting is configured with BASIC authentication, the authentication check is not applied to Hessian endpo…
-
Critical 9.4
Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to a…
-
Unscored —
Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP method
The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP methods. A remote unauthenticated attacker can bypass authentication by sending requests with another HTTP method. Users are recommended to upgra…
-
Unscored —
Apache TomEE: Missing authorization on internal deployer EJBs in default profile
The internal system EJBs used for remote deployment and configuration did not enforce their administrative role check when the server ran with the default profile. A remote unauthenticated attacker able to reach the remote EJB endpoint could deploy arbitrary …
-
Unscored —
Apache TomEE: Stateful session bean hijacking via predictable session identifiers
Stateful session bean identifiers are not generated from a cryptographically secure random source. A remote attacker with access to the EJB remote endpoint who holds one valid identifier can derive those of other clients' sessions and invoke methods on their …
-
Unscored —
Apache TomEE: Path traversal via stateful EJB passivation
The stateful session bean passivation mechanism derives the on-disk file name from a client-supplied identifier without validating it. A remote attacker with access to the remote EJB service can cause session state to be read from or written to files outside …
-
Unscored —
Apache TomEE: Username enumeration and timing side channel in JAAS login modules
The bundled JAAS login modules leak whether a username exists and compare credentials in a non-constant-time manner. A remote unauthenticated attacker can enumerate valid accounts and may infer credential material through timing analysis. Users are recommende…
-
Unscored —
Apache TomEE: LDAP injection in LDAP identity store
The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before using it in directory queries. A remote unauthenticated attacker can alter the queries to enumerate accounts, infer directory attribute values, or influe…
-
Unscored —
Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web application
Authentication configured for an EJB JAX-WS endpoint in the TomEE deployment descriptor is not enforced when the endpoint is published within an existing web application. A remote unauthenticated attacker can invoke the web service operations, unless the appl…
-
Unscored —
The embedded OpenEJB HTTP server dispatches some requests to REST endpoints configured for HTTP Basic authentication wi…
-
Unscored —
The embedded OpenEJB HTTP server does not restrict static resource paths to the configured resource directories. A remo…
-
Critical 9.6
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of p…
-
Unscored —
The embedded HTTP server does not clear the security identity established during a request before its worker thread han…
-
Unscored —
The embedded HTTP server does not invalidate the previous session identifier when an application changes the session id…
-
Unscored —
Apache TomEE: Code execution by any authenticated user via the SSH administration shell
The optional SSH administration service grants full access to the administration shell to every user that authenticates against its configured login domain, without checking for an administrative role. An attacker holding the credentials of any user in that d…
-
Unscored —
The JDBC based JAAS login module accepts a login without a password for accounts whose stored password is NULL. A remot…
-
Medium 6.8
Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows …
-
Unscored —
When a non-default stateful session bean passivation strategy is configured, passivated bean state is written to predic…
-
Medium 4.3
A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3…
-
High 8.8
A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (vers…
-
Unscored —
When MicroProfile JWT authentication is used for servlets that declare a run-as identity, the security state establishe…
-
Unscored —
A negative MicroProfile JWT clock skew setting is not rejected and disables validation of the token expiration and othe…
-
Critical 9.8
SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker t…