|
481
|
6.5 |
MEDIUM
Network
|
apache
|
cxf
|
A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's…
New
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2026-50634
|
2026-06-13 03:49 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
482
|
7.8 |
HIGH
Local
|
adobe
|
acrobat_dc acrobat_reader_dc acrobat
|
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit…
Update
|
CWE-416
Use After Free
|
CVE-2026-47955
|
2026-06-13 03:49 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
483
|
7.8 |
HIGH
Local
|
adobe
|
acrobat_dc acrobat_reader_dc acrobat
|
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit…
Update
|
CWE-416
Use After Free
|
CVE-2026-47915
|
2026-06-13 03:48 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
484
|
4.3 |
MEDIUM
Network
|
redhat
|
directory_server 389_directory_server enterprise_linux
|
A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to authenticated user…
Update
|
CWE-843
Type Confusion
|
CVE-2026-11785
|
2026-06-13 03:47 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
485
|
6.5 |
MEDIUM
Network
|
redhat
|
directory_server 389_directory_server enterprise_linux
|
A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds…
Update
|
CWE-125
Out-of-bounds Read
|
CVE-2026-11786
|
2026-06-13 03:40 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
486
|
6.3 |
MEDIUM
Network
|
redhat
|
directory_server 389_directory_server enterprise_linux
|
A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that …
Update
|
CWE-126
Buffer Over-read
|
CVE-2026-11787
|
2026-06-13 03:38 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
487
|
7.5 |
HIGH
Network
|
redhat
|
directory_server 389_directory_server enterprise_linux
|
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the L…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-11788
|
2026-06-13 03:30 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
488
|
6.5 |
MEDIUM
Network
|
redhat
|
directory_server 389_directory_server enterprise_linux
|
A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a…
Update
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2026-11789
|
2026-06-13 03:30 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
489
|
4.9 |
MEDIUM
Network
|
redhat
|
directory_server 389_directory_server enterprise_linux
|
A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker…
Update
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-11790
|
2026-06-13 03:21 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
490
|
7.5 |
HIGH
Network
|
-
|
-
|
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.
These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
New
|
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
|
CVE-2026-9638
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|