114 matches found
EUVD-2025-24555
Malicious code in bioql PyPI...
SUSE CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All API modules allows Excessive Allocation. This vulnerability is associated with program files...
DEBIAN-CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...
CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...
CVE-2025-8916
CVE-2025-8916 is an Allocation of Resources Without Limits or Throttling issue affecting BC Java libraries (bcpkix, bcprov) and BCPKIX FIPS. Connected IBM bulletins confirm the vulnerability affects BC Java components across multiple IBM products (e.g., watsonx.data, Maximo Predict, App Connect f...
CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...
Bouncy Castle 安全漏洞
Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions 1.44 through 1.78, which stems from an unrestricted resource allocation that could lead to...
Linux Distros Unpatched Vulnerability : CVE-2021-47229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not ye...
Improper Encoding or Escaping of Output
Overview wikibase/wikibase is a Structured data repository for MediaWiki Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the ImageHandler::getDimensionsString method. An attacker can manipulate the output of the script by injecting malicious code in...
ConnMan 安全漏洞
ConnMan is an Aldebaran open source connection manager. A security vulnerability exists in ConnMan 1.44 and earlier versions, which stems from a memcpy length dependency on the RR RDLENGTH value...
CVE-2025-32366
In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohsrr-rdlen and memcpyresponse+offset,end,rdlen without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining...
CVE-2024-55060
A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2024-55060
A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Rafed CMS 安全漏洞
Rafed CMS is a blogging system from Rafed Inc. A security vulnerability exists in Rafed CMS version 1.44, which stems from a cross-site scripting vulnerability that could allow an attacker to execute arbitrary web script or HTML via a specially crafted payload...
Exploit for Cross-site Scripting in Rafed-System Rafed_Cms_Website
CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting...
Security Updates for Azure Connected Machine Agent (August 2024)
The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.44. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...
CVE-2023-45998
kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...
CVE-2023-45998
kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...
CVE-2023-45998
CVE-2023-45998 affects kodbox 1.44 and describes a Cross Site Scripting (XSS) vulnerability triggered by customizing global HTML, resulting in stored XSS. Affected component/entry point is the global HTML customization path; underlying issue is XSS propagation via stored payloads. Documented impa...