CVE-2010-1317

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...

CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header...

CVE-2010-4596

Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request...

CVE-2024-11084

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2024-11084

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2024-11084 Potential Username Enumeration in Helix ALM

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2024-11084

CVE-2024-11084 affects Perforce Helix ALM prior to 2025.1. The issue is that authentication returns distinct error responses, enabling an attacker to determine whether a username exists (username enumeration). The connected sources (RH Red Hat, NVD, CVE Lists, CNNVD) corroborate the same descript...

CVE-2024-11084 Potential Username Enumeration in Helix ALM

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

CVE-2025-31130 vulnerabilities

Vulnerabilities for packages: starship, cargo-c, helix, cargo-audit...

GHSA-2FRX-2596-X5R6 vulnerabilities

Vulnerabilities for packages: starship, cargo-c, helix, cargo-audit...

CVE-2025-31130 vulnerabilities

Vulnerabilities for packages: cargo-c, starship, cargo-audit, helix...

GHSA-2FRX-2596-X5R6 vulnerabilities

Vulnerabilities for packages: cargo-c, starship, cargo-audit, helix...

@adobe/helix-importer (>=3.4.65 <=3.4.79), @adobe/helix-md2docx (>=2.2.0 <=2.2.7) +57 more potentially affected by CVE-2025-71319 via image-size (>=2.0.0 <=2.0.1)

image-size NPM version =2.0.0, =3.4.65, =2.2.0, =2.6.5, =1.3.47, =1.4.2, =5.0.0-alpha.40, =7.12.0-main6e45b19, =0.28.1-feature.esm.cjs.8, =0.28.1-feature.esm.cjs.8, =0.28.1-feature.esm.cjs.13, =0.28.1-feature.jose.vcdm.19, =0.28.1-feature.esm.cjs.18, =0.28.1-feature.esm.cjs.8,...

@adobe/helix-importer (>=3.1.2 <=3.4.79), @adobe/helix-md2docx (>=2.1.38 <=2.1.107) +144 more potentially affected by CVE-2025-71319 via image-size (>=1.1.0 <=1.2.0)

image-size NPM version =1.1.0, =3.1.2, =2.1.38, =1.0.0, =2.4.3, =1.1.1, =1.0.0, =1.0.0-B001, =0.0.28, =2.17.13, =0.17.6, =1.16.10, =7.1.0, =0.0.1, =1.1.69, =5.0.0-alpha.27, =5.0.0-alpha.39 and more Source cves: CVE-2025-71319 Source advisory: OSV:GHSA-M5QC-5HW7-8VG7...

SUSE CVE-2023-38647

An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. This unbounded deserialization can likely lead to remote code execution. The code can be run...

CVE-2024-10314

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the auto-generation function was identified. Reported by Karol Więsek...

CVE-2024-10345

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Karol Więsek...

CVE-2024-10344

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the refuse function was identified. Reported by Karol Więsek...

CVE-2024-10314

CVE-2024-10314 affects Perforce Helix Core versions prior to 2024.2. The vulnerability is an unauthenticated remote Denial of Service (DoS) that leverages the auto-generation function, leading to potential service disruption. The issue has been reported by Karol Więsek. Connected documents corrob...

CVE-2024-10314 Unauthenticated Denial of Service via Auto Generation Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the auto-generation function was identified. Reported by Karol Więsek...