1620 matches found
AZL-69706 CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
AZL-66147 CVE-2025-5222 affecting package icu for versions less than 68.2.0.9-2
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
CVE-2025-5222
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
CVE-2025-5222
CVE-2025-5222 is a stack buffer overflow in the ICU library’s SRBRoot::addTag. Connected advisories indicate affected packages across distributions include ICU itself and dependent packages (e.g., nodejs and icu packages) with versions below patched releases (e.g., nodejs < 20.14.0-10, nodejs1...
CVE-2025-5222 Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
Johnson Controls iSTAR Configuration Utility (ICU) tool
RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to gain access to memory leaked from the ICU. This utility is only used to configure products that are no longer manufactured or supported. ICU is not used to configure the iSTAR Ultra and the current iSTAR G2...
CVE-2025-5222: Buffer Copy without Checking Size of Input
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
CVE-2025-5222
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
Alibaba Cloud Linux 3 : 0022: nodejs:14 (ALINUX3-SA-2021:0022)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0022 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-10531: An issue was discovered in...
org.elasticsearch:elasticsearch-analysis-icu (0.17.2), org.elasticsearch:elasticsearch-cloud-aws (0.17.2) +11 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.17.2)
org.elasticsearch:elasticsearch MAVEN version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.2 - org.elasticsearch:elasticsearch-cloud-aws...
org.elasticsearch:elasticsearch-analysis-icu (0.16.2), org.elasticsearch:elasticsearch-cloud-aws (0.16.2) +11 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.16.2)
org.elasticsearch:elasticsearch MAVEN version 0.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.2 - org.elasticsearch:elasticsearch-cloud-aws...
org.elasticsearch:elasticsearch-analysis-icu (0.17.0), org.elasticsearch:elasticsearch-cloud-aws (0.17.0) +11 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.17.0)
org.elasticsearch:elasticsearch MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.0 - org.elasticsearch:elasticsearch-cloud-aws...
org.elasticsearch:elasticsearch-analysis-icu (0.15.1), org.elasticsearch:elasticsearch-cloud-aws (0.15.1) +11 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.15.1)
org.elasticsearch:elasticsearch MAVEN version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.1 - org.elasticsearch:elasticsearch-cloud-aws...
org.elasticsearch:elasticsearch-analysis-icu (0.7.0), org.elasticsearch:elasticsearch-client-groovy (0.7.0) +3 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.7.0)
org.elasticsearch:elasticsearch MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.0 - org.elasticsearch:elasticsearch-client-groov...
org.elasticsearch:elasticsearch-analysis-icu (0.17.4), org.elasticsearch:elasticsearch-cloud-aws (0.17.4) +11 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.17.4)
org.elasticsearch:elasticsearch MAVEN version 0.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.4 - org.elasticsearch:elasticsearch-cloud-aws...
org.elasticsearch:elasticsearch-analysis-icu (0.9.0), org.elasticsearch:elasticsearch-client-groovy (0.9.0) +4 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.9.0)
org.elasticsearch:elasticsearch MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.9.0 - org.elasticsearch:elasticsearch-client-groov...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...
