Known Vulnerabilities for Application Service by Pivotal Software

Listed below are 4 of the newest known vulnerabilities associated with "Application Service" by "Pivotal Software".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-67312 json axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (expos... Not Provided 2026-08-01 2026-08-01
CVE-2026-67216 json cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the func... Not Provided 2026-07-29 2026-07-30
CVE-2026-67214 json nanoid (Nano ID) before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module ... Not Provided 2026-07-29 2026-07-29
CVE-2026-67213 json nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these function... Not Provided 2026-07-29 2026-07-29
CVE-2026-66913 json Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker ... Not Provided 2026-07-28 2026-07-28
CVE-2026-66066 json Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Ac... Not Provided 2026-07-30 2026-08-01
CVE-2026-64194 json Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainNam... Not Provided 2026-07-20 2026-07-21
CVE-2026-63301 json In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding opti... Not Provided 2026-07-28 2026-07-28
CVE-2026-61136 json Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The sup... Not Provided 2026-07-21 2026-07-23
CVE-2026-60777 json Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versi... Not Provided 2026-07-21 2026-07-24
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationPivotal SoftwareApplication Service667.0.7
ApplicationPivotal SoftwareApplication Service666.0.21
ApplicationPivotal SoftwareApplication Service665.0.28
ApplicationPivotal SoftwareApplication Service2.6.3
ApplicationPivotal SoftwareApplication Service2.6.2
ApplicationPivotal SoftwareApplication Service2.6.1
ApplicationPivotal SoftwareApplication Service2.6.0
ApplicationPivotal SoftwareApplication Service2.5.8
ApplicationPivotal SoftwareApplication Service2.5.7
ApplicationPivotal SoftwareApplication Service2.5.6
ApplicationPivotal SoftwareApplication Service2.5.5
ApplicationPivotal SoftwareApplication Service2.5.4
ApplicationPivotal SoftwareApplication Service2.5.3
ApplicationPivotal SoftwareApplication Service2.5.2
ApplicationPivotal SoftwareApplication Service2.5.1
ApplicationPivotal SoftwareApplication Service2.5.0
ApplicationPivotal SoftwareApplication Service2.4.9
ApplicationPivotal SoftwareApplication Service2.4.8
ApplicationPivotal SoftwareApplication Service2.4.7
ApplicationPivotal SoftwareApplication Service2.4.6
Results limited to 20 most recent known configurations

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report