117 matches found
UBUNTU-CVE-2025-47712
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...
CVE-2025-47711 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...
io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout
A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...
CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout
A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...
CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout
A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...
Red Hat Quarkus 安全漏洞
Red Hat Quarkus is a wireless network from Red Hat, Inc. for optimizing Java specifically for containers and making it an efficient platform for serverless, cloud, and Kubernetes environments. A security vulnerability exists in Red Hat Quarkus that stems from a memory leak caused by a client...
Malicious code in client-req-bans (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7b540646327a4a8326c496059737e3bb81af664a3c51951c1a4caeb0e265496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-49768
A flaw was found in the Waitress WSGI server for Python. A remote client can send a request that is exactly recvbytes, which defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default, Waitress won't read any more requests, and when th...
CVE-2024-49974 NFSD: Limit the number of concurrent async COPY operations
In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY can copy an unlimited number of 4MB...
MAL-2024-9470 Malicious code in @pcid/client-request-builder (npm)
--- -= Per source details. Do not edit below this line.=-...
Honeywell多款产品 安全漏洞
Honeywell PC42tp and others are a printer from Honeywell USA. A security vulnerability exists in various Honeywell products that stems from the presence of a cross-site scripting vulnerability that could lead to information disclosure, session theft, or client request forgery. The following...
Integrating mPulse’s Beacon API with EdgeWorkers to Visualize All Client Requests
Akamai mPulse combines with Akamai EdgeWorkers to visualize any client request and uses its http-request module to let users send their own requests...
Dell DM5500 跨站脚本漏洞
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...
CVE-2023-4252
The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment...
CVE-2023-39930
CVE-2023-39930 describes a first-factor authentication bypass in PingFederate with PingID Radius PCV triggered by a maliciously crafted RADIUS MSCHAP authentication request. The impact stated across sources is a bypass of the first factor, potentially affecting authentication integrity and access...
CVE-2023-39930 PingFederate PingID Radius PCV Authentication Bypass
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...
PT-2023-27162 · Ping Identity · Pingfederate
Name of the Vulnerable Software and Affected Versions: PingFederate with PingID Radius PCV affected versions not specified Description: A first-factor authentication bypass issue exists when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request. This allows for...
Design/Logic Flaw
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
