Vulnerabilities
Summary — last 7 days
New vulnerabilities5,182▲ 2,098 vs. last week
Critical / high2,882▲ 1,386 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
91 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.8) | 6.9% | 💥 Exploit | Oracle Glassfish Server | 5/3/2012 | 6/16/2026 | Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container. | |
| Modified | Medium (5) | 1.5% | — | Oracle Glassfish Server | 1/18/2012 | 6/16/2026 | Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect availability via unknown vectors related to Web Container. | |
| Modified | Low (3.7) | 0.31% | — | Oracle Glassfish Server | 1/18/2012 | 6/16/2026 | Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration. | |
| Modified | Low (2.1) | 0.35% | — | Oracle SUN Glassfish Enterprise Server | 1/18/2012 | 6/16/2026 | Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration. | |
| Modified | Medium (5) | 68% | 💥 Exploit | Oracle Glassfish Server | 12/30/2011 | 6/16/2026 | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial… | |
| Modified | High (7.8) | 3.1% | — | Oracle Communications ServerOracle Glassfish ServerOracle Java System Application Server | 10/18/2011 | 6/16/2026 | Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container. | |
| Modified | High (10) | 61% | 💥 Exploit | Oracle Glassfish ServerSUN Java System Application Server | 4/20/2011 | 6/16/2026 | Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration. | |
| Modified | Medium (5.7) | 0.34% | — | Oracle Glassfish ServerOracle Java System Message Queue | 1/19/2011 | 6/16/2026 | Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS). | |
| Modified | Low (2.4) | 0.27% | — | Oracle Java System Application ServerOracle Glassfish Server | 7/13/2010 | 6/16/2026 | Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI. | |
| Modified | Medium (4.3) | 8.2% | 💥 Exploit | Oracle Glassfish Server | 5/6/2009 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4)… | |
| Modified | Medium (4.3) | 5.4% | 💥 Exploit | SUN Java System Application ServerOracle Glassfish Server | 11/28/2008 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector… | |
| Modified | Medium (4.3) | 4.8% | 💥 Exploit | Oracle Glassfish ServerSUN Java System Application Server | 6/18/2008 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2)… | |
| Modified | High (7.5) | 1.6% | — | Fermentigrafici Wineglass | 1/5/2007 | 6/16/2026 | WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb. | |
| Modified | Medium (4.3) | 1.4% | — | Looking Glass | 9/2/2005 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7)… | |
| Modified | High (7.5) | 12% | 💥 Exploit | Looking Glass | 9/2/2005 | 6/16/2026 | Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field. | |
| Modified | Medium (5) | 2.0% | — | Seaglass Technologies Inc. Sglmerchant | 9/8/2001 | 6/16/2026 | Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter. |