Java - CVE CyberSecurity Database News (Page 18)

Feb 20, 2025 Windows GraphQL gRPC Java Apache

CVE-2025-27098 - Static File Path Traversal Vulnerability in GraphQL Mesh – Details, Exploit, and How to Fix

GraphQL Mesh is a powerful gateway and federation framework that gives you the flexibility to connect not just GraphQL subgraphs, but also REST APIs, gRPC

Feb 18, 2025 RCE Exploit Java

CVE-2025-0422 - Authenticated Remote Code Execution in "bestinformed Web" via ScriptVars

A new vulnerability tracked as CVE-2025-0422 has been discovered in the "bestinformed Web" application, exposing organizations to remote code execution (RCE). This severe

Feb 16, 2025 API Java

CVE-2024-57971 - How a Small Validation Fault in DataSourceResource.java Breaks Database Security in Knowage Server

CVE-2024-57971 is a scary-sounding number if you run a Knowage Business Intelligence (BI) server. This serious vulnerability in versions _before 8.1.30_ means an

Feb 14, 2025 Exploit Java Apache

CVE-2024-56180 - Remote Code Execution via CWE-502 Deserialization Vulnerability in Apache EventMesh eventmesh-meta-raft Plugin

On June 9, 2024, the security community identified a critical vulnerability in the Apache EventMesh project, specifically in the eventmesh-meta-raft plugin module. Assigned as CVE-2024-56180,

Feb 14, 2025 Exploit Java Apache

CVE-2024-52577 - Critical Apache Ignite Deserialization Bug—How Attackers Can Run Code on Your Server

Apache Ignite is a popular in-memory computing platform, used widely for distributed database, caching, and computing workloads. Recently, a serious security flaw has been discovered: