Java - CVE CyberSecurity Database News (Page 4)

Oct 27, 2025 Exploit Java Apache

CVE-2025-55752 - Apache Tomcat Relative Path Traversal Vulnerability – Exploit, Impact, and Practical Guidance

A dangerous new security hole—CVE-2025-55752—has been discovered in Apache Tomcat, one of the world’s most popular Java application servers. This vulnerability opens

Oct 17, 2025 RCE XXE Windows Java Apache

CVE-2024-31573 - How a Simple XMLUnit for Java Bug Can Open the Door to Remote Code Execution

Summary: In March 2024, a new vulnerability was identified in XMLUnit for Java—CVE-2024-31573. This issue, lurking since the early days of the library and

Oct 14, 2025 Windows Microsoft Java

CVE-2025-59287 - Exploiting WSUS Deserialization of Untrusted Data for Remote Code Execution

--- Overview A critical new vulnerability, CVE-2025-59287, has rocked system administrators: via deserialization of untrusted data in Windows Server Update Services (WSUS), attackers can execute

Oct 9, 2025 Exploit SQL Java Oracle Apache

CVE-2025-62228 - Apache Flink CDC 3.4. SQL Injection Vulnerability Explained

On March 7, 2025, security researchers identified a critical vulnerability in Apache Flink CDC, specifically in version 3.4.. Tracked as CVE-2025-62228, this flaw allows

Sep 22, 2025 Java

CVE-2025-59800 - How a Heap Buffer Overflow in Artifex Ghostscript up to 10.05.1 Threatens Your System

Artifex Ghostscript is a widely used interpreter for PostScript and PDF file formats. It's commonly found in print servers, PDF manipulation tools, and