CVE-2025-2900

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation...

CVE-2025-2900 IBM Semeru Runtime denial of service

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation...

CVE-2025-2900

CVE-2025-2900 is documented in connected IBM security bulletins as affecting IBM Semeru Runtime across multiple releases with a denial-of-service impact due to a buffer overflow in the native AES/CBC encryption path. The IBM pages for OpenPages and related Bulletins explicitly reference CVE-2025-...

CVE-2025-2900 IBM Semeru Runtime denial of service

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation...

RockyLinux 8 : thunderbird (RLSA-2025:2900)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:2900 advisory. firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 CVE-2025-1938 firefox:...

Oracle Linux 8 : thunderbird (ELSA-2025-2900)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-2900 advisory. 128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5...

CVE-2022-2900

Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...

SUSE SLES12 Security Update : python-setuptools (SUSE-SU-2024:2900-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2900-1 advisory. - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105 Tenable has extracted the preceding...

Malicious code in wlwz-2312-2900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1746ebb3221f82797dc6c17eeb5f3a5895489e9f2040517f88ac9c228c454d38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-431 Malicious code in wlwz-2312-2900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1746ebb3221f82797dc6c17eeb5f3a5895489e9f2040517f88ac9c228c454d38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-2900

creationtimestamp| type| source ---|---|--- 2024-01-09 14:46:43+00:00| seen| https://t.me/ctinow/165030...

CVE-2023-2900

CVE-2023-2900 affects NFine Rapid Development Platform 20230511. Affected is an unknown function of the file /Login/CheckLogin, where manipulation leads to use of a weak hash. The issue can be exploited remotely; attack complexity is high and exploitability is difficult. Public disclosure has occ...

CVE-2023-2900 NFine Rapid Development Platform CheckLogin weak hash

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been classified as problematic. Affected is an unknown function of the file /Login/CheckLogin. The manipulation leads to use of weak hash. It is possible to launch the attack remotely. The complexity of an attack is...

CVE-2022-2900

creationtimestamp| type| source ---|---|--- 2022-09-14 14:26:27+00:00| seen| https://t.me/cibsecurity/49762...

CVE-2022-2900

Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...

CVE-2022-2900

CVE-2022-2900 affects the npm package parse-url (GitHub: ionicabizau/parse-url) up to version 8.0.x; it is a Server-Side Request Forgery (SSRF) vulnerability that could allow a remote attacker to induce the server to perform requests on its behalf. The NVD/CVSS data assign a 9.1 CRITICAL base sco...

CVE-2022-2900 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url

Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...

Debian DLA-2900-1 : lrzsz - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2900 advisory. - lrzsz before version 0.12.21rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around...

Mageia: Security Advisory (MGASA-2013-0278)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...