Java - CVE CyberSecurity Database News (Page 66)

Oct 23, 2023 Exploit Java Apache Apache Software Foundation Apache HTTP Server

CVE-2023-45802 - HTTP/2 Memory Leak Vulnerability Explained and Exploited

In this post, we will take an exclusive deep dive into CVE-2023-45802, a memory leak vulnerability found in certain HTTP/2 server implementations, like Apache

Oct 20, 2023 API SOAP Java Apache Apache Software Foundation Apache Santuario

CVE-2023-44483 - Info Leak in Apache Santuario - XML Security for Java (Private Key Disclosure)

A critical vulnerability has surfaced in Apache Santuario - XML Security for Java, tracked as CVE-2023-44483. All versions before 2.2.6, 2.3.4,

Oct 20, 2023 Exploit Java Vmware

CVE-2023-34052 - Exploiting Deserialization in VMware Aria Operations for Logs – Authentication Bypass Explained

--- VMware Aria Operations for Logs (formerly known as vRealize Log Insight) is a crucial tool in many enterprise environments for centralized log management and

Oct 17, 2023 Exploit Java Oracle Oracle Corporation WebLogic Server

CVE-2023-22101 - Remote Takeover Risk in Oracle WebLogic Server Explained

Summary: In October 2023, Oracle published an advisory about CVE-2023-22101, a serious vulnerability in Oracle WebLogic Server, a cornerstone product for many enterprise Java applications.

Oct 17, 2023 Exploit Java Oracle Oracle Corporation MySQL Connectors

CVE-2023-22102 - Critical Vulnerability in Oracle MySQL Connector/J 8.1. and Older – How It Works, Exploit Details, and Mitigation

--- Introduction On January 2023, Oracle published CVE-2023-22102, a security vulnerability affecting the MySQL Connector/J, a popular Java library for communicating with MySQL databases.