Java - CVE CyberSecurity Database News (Page 28)

Dec 20, 2024 Windows Java Apache

CVE-2024-56337 - Understanding the New TOCTOU Race Condition in Apache Tomcat (With Exploit Explanation & Mitigation Guide)

Published: June 2024 Overview A serious vulnerability, tracked as CVE-2024-56337 [NVD link], has been discovered in Apache Tomcat, one of the most widely used Java

Dec 19, 2024 CSS Windows Exploit Java

CVE-2024-38819 - Path Traversal in Spring WebMvc.fn and WebFlux.fn – How Attackers Steal Your Files

In June 2024, a serious vulnerability was discovered in the Spring Java framework: CVE-2024-38819. This bug allows attackers to read arbitrary files on the server,

Dec 19, 2024 XXE Java

CVE-2024-12801 - Exploiting SSRF in Java logback (QOS.CH) Through Malicious XML Configuration

A recent vulnerability, designated CVE-2024-12801, has shaken the Java world—specifically the logback logging framework maintained by QOS.CH. This issue affects logback versions from

Dec 19, 2024 RCE Java

CVE-2024-12798 - Critical RCE in QOS.CH logback-core JaninoEventEvaluator – What Every Java Developer Must Know

Overview: The security community has been alerted to a dangerous vulnerability — CVE-2024-12798 — that affects logback-core (by QOS.CH), a popular logging framework used widely in

Dec 17, 2024 Java

CVE-2024-49816 - Sensitive Data Leaks in IBM Security Guardium Key Lifecycle Manager – What You Need to Know

A new security vulnerability, identified as CVE-2024-49816, has been discovered in IBM Security Guardium Key Lifecycle Manager (GKLM) versions 4.1, 4.1.1, 4.