CVE-2024-11084

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2024-11084 Potential Username Enumeration in Helix ALM

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2024-11084

CVE-2024-11084 affects Perforce Helix ALM prior to 2025.1. The issue is that authentication returns distinct error responses, enabling an attacker to determine whether a username exists (username enumeration). The connected sources (RH Red Hat, NVD, CVE Lists, CNNVD) corroborate the same descript...

CVE-2024-11084 Potential Username Enumeration in Helix ALM

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2024-11084: Observable Discrepancy

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2025-31130 vulnerabilities

Vulnerabilities for packages: starship, cargo-audit, helix, cargo-c...

GHSA-2FRX-2596-X5R6 vulnerabilities

Vulnerabilities for packages: starship, cargo-audit, helix, cargo-c...

CVE-2025-31130 vulnerabilities

Vulnerabilities for packages: cargo-c, cargo-audit, helix, starship...

GHSA-2FRX-2596-X5R6 vulnerabilities

Vulnerabilities for packages: cargo-c, cargo-audit, helix, starship...

@adobe/helix-importer (>=3.4.65, <=3.4.79), @adobe/helix-md2docx (>=2.2.0, <=2.2.7) +93 more potentially affected by CVE-2025-71319 via image-size (>=2.0.0, <=2.0.1)

image-size NPM version =2.0.0, =3.4.65, =2.2.0, =2.6.5, =1.3.47, =1.4.2, =1.0.1-alpha.1, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427...

@adobe/helix-importer (>=3.1.2, <=3.4.79), @adobe/helix-md2docx (>=2.1.38, <=2.1.107) +145 more potentially affected by CVE-2025-71319 via image-size (>=1.1.0, <=1.2.0)

image-size NPM version =1.1.0, =3.1.2, =2.1.38, =1.0.0, =2.4.3, =1.1.1, =1.0.0, =1.0.0-B001, =0.0.28, =2.17.13, =0.17.6, =1.16.10, =7.1.0, =0.0.1, =1.1.69, =5.0.0-alpha.27, =5.0.0-alpha.39 and more Source cves: CVE-2025-71319 Source advisory: OSV:GHSA-M5QC-5HW7-8VG7...

SUSE CVE-2023-38647

An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. This unbounded deserialization can likely lead to remote code execution. The code can be run...

CVE-2024-10344

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the refuse function was identified. Reported by Karol Więsek...

CVE-2024-10345

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Karol Więsek...

CVE-2024-10314

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the auto-generation function was identified. Reported by Karol Więsek...

CVE-2024-10314 Unauthenticated Denial of Service via Auto Generation Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the auto-generation function was identified. Reported by Karol Więsek...

CVE-2024-10314 Unauthenticated Denial of Service via Auto Generation Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the auto-generation function was identified. Reported by Karol Więsek...

CVE-2024-10314

CVE-2024-10314 affects Perforce Helix Core versions prior to 2024.2. The vulnerability is an unauthenticated remote Denial of Service (DoS) that leverages the auto-generation function, leading to potential service disruption. The issue has been reported by Karol Więsek. Connected documents corrob...

CVE-2024-10344

Helix Core prior to 2024.2 is affected by an unauthenticated remote Denial of Service (DoS) via the refuse function. The issue arises in the core when the refuse feature is invoked, allowing unauthenticated actors to trigger a DoS from the network. Public advisories consistently reference version...

CVE-2024-10344 Unauthenticated Denial of Service via Refuse Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the refuse function was identified. Reported by Karol Więsek...