Java - CVE CyberSecurity Database News (Page 57)

Nov 15, 2023 CSS Java Pivotal

CVE-2023-34062 - Exploiting Directory Traversal in Reactor Netty HTTP Server — Complete Guide with PoC

--- The world of Java and reactive servers took a big hit recently with the discovery of CVE-2023-34062. This security flaw lets attackers perform directory

Nov 14, 2023 API Exploit Java Fortinet FortiSIEM

CVE-2023-36553 - OS Command Injection in Fortinet FortiSIEM – A Deep Dive

Fortinet FortiSIEM is a recognized name in the network security world, providing organizations with robust tools to gather and analyze security event data. Unfortunately, like

Nov 10, 2023 API Exploit Java Apache Sysaid

CVE-2023-47246 - How Attackers Exploited SysAid's Path Traversal Bug for Code Execution

In November 2023, security researchers discovered a dangerous vulnerability (CVE-2023-47246) in the SysAid On-Premise platform, versions before 23.3.36. The bug quickly became a

Nov 8, 2023 API Java Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

CVE-2023-4061 - Exploiting Wildfly-Core’s resolve-expression Flaw For Sensitive Information Disclosure

In August 2023, a serious vulnerability (CVE-2023-4061) was disclosed in Wildfly-Core, an important management framework used in many enterprise Java applications. This vulnerability, if left

Nov 3, 2023 Windows Java Galaxy Software Services Vitals ESP

CVE-2023-41357 - Exploiting File Upload Vulnerability in Galaxy Software Services Vitals ESP

In September 2023, Galaxy Software Services Corporation’s Vitals ESP—their online knowledge base management portal—was found to have a severe file upload vulnerability.