Java - CVE CyberSecurity Database News (Page 36)

Oct 15, 2024 RCE Exploit Java Oracle

CVE-2024-21216 - Critical Oracle WebLogic Server Core Component Remote Takeover Exploit

In this exclusive deep dive, we explore CVE-2024-21216, a critical-rated vulnerability affecting Oracle WebLogic Server, part of Oracle Fusion Middleware. If you

Oct 14, 2024 Java

CVE-2024-8184 - Exploiting Jetty’s ThreadLimitHandler.getRemote() for DoS Attacks – A Simple Guide

A fresh security issue has surfaced in Eclipse Jetty, tracked as CVE-2024-8184. This vulnerability sits inside Jetty’s ThreadLimitHandler.getRemote() function and can

Oct 3, 2024 Exploit Java Apache

CVE-2024-47554 - How a Tiny XML File Can Grind Your Java Server—The Uncontrolled Resource Consumption in Apache Commons IO

--- Summary: A new vulnerability registered as CVE-2024-47554 affects Apache Commons IO versions 2. up to—but not including—2.14.. It’s rooted

CVE-2024-47561 - How Schema Parsing in Apache Avro (Java SDK) Opens the Door to Remote Code Execution

Oct 3, 2024 API Exploit Java Apache

CVE-2024-47561 - How Schema Parsing in Apache Avro (Java SDK) Opens the Door to Remote Code Execution

--- Introduction If you're building apps that handle data serialization with Apache Avro, you should sit up and take note: CVE-2024-47561 exposes

Sep 30, 2024 RCE Exploit Java Apache

CVE-2024-45772 - Deserialization of Untrusted Data Vulnerability in Apache Lucene Replicator

CVE-2024-45772 is a critical security bug found in the Apache Lucene replicator module, specifically affecting implementations relying on the deprecated org.apache.lucene.