CVE-2023-2251 vulnerabilities

Vulnerabilities for packages: semaphore...

ECHO-2251-F2E7-9C06

Bulletin has no description...

CVE-2026-2251

creationtimestamp| type| source ---|---|--- 2026-02-27 09:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mftdwbqjob22 2026-02-27 09:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftenjtci22o 2026-02-28 08:03:26+00:00| seen|...

CVE-2026-2251 Path Traversal leading to Remote Code Execution (RCE)

Improper limitation of a pathname to a restricted directory Path Traversal vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upgrading to FreeFlow Core version 8.1.0 vi...

EUVD-2026-2251

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

CVE-2019-2251

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

Linux Distros Unpatched Vulnerability : CVE-2023-2251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5. CVE-2023-2251 Note that Nessus relies on the presence of the package as reported by the...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to uncaught exception due to eemeli/yaml ( CVE-2023-2251 )

Summary eemeli/yaml is used by IBM Cloud Pak for Data. CVE-2023-2251. Vulnerability Details CVEID:CVE-2023-2251 DESCRIPTION: YAML is vulnerable to a denial of service, caused by an uncaught exception in the parseDocument and parseAllDocuments functions. By sending a specially crafted input, a...

CVE-2022-2251

Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets another user to trigger a pipeline to execute commands in the runner as that othe...

CVE-2021-2251

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Data Source. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM...

CVE-2025-2251

creationtimestamp| type| source ---|---|--- 2025-04-07 17:04:09+00:00| seen| https://t.me/cvedetector/22306 2025-04-24 11:06:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13215 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:40+00:00| seen|...

CVE-2025-2251

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

CVE-2025-2251 Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

CVE-2025-2251 Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

CVE-2025-2251

CVE-2025-2251 is an issue in Red Hat JBoss EAP 7.4.x/WildFly where the EJB remote invocation path deserializes untrusted data via JBoss Marshalling, allowing remote code execution without authentication. Red Hat advisories RHSA-2025:10925 and related notices enumerate this vulnerability among sev...

Oracle Siebel CRM 6.1.x / 6.1.1.x / 6.2.x (July 2015 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2015 CPU advisory. - Vulnerability in the Siebel Apps - E-Billing component of Oracle Siebel CRM subcomponent: Security. Supported versions that are affected are 6.1, 6.1.1 and...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to YAML denial of service vulnerabilitiy [CVE-2023-2251]

Summary Potential YAML denial of service vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-2251 Vulnerability Details CVEID:CVE-2023-2251 DESCRIPTION: YA...

CVE-2019-2251

creationtimestamp| type| source ---|---|--- 2024-01-08 17:46:41+00:00| seen| https://t.me/ctinow/164526...

sexmonster.org Cross Site Scripting vulnerability OBB-3740174

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and improper file download via http-cache-semantics, Gin-Gonic, and YAML (CVE-2022-25881, CVE-2023-2251, CVE-2023-29401)

Summary IBM Storage Fusion and IBM Storage Fusion HCI, previously known as Spectrum Fusion and Spectrum Fusion HCI, may be vulnerable to denial of service via http-cache-semantics, denial of service via TypeScript's yaml and improper file attachment download for Node.js's http-cache-semantics as...