CVE-2025-52989: Improper Neutralization of Delimiters

An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration. A user with limited configuration and commit permissions, using a specifically crafted...

CVE-2025-47779: Improper Neutralization of Delimiters

Asterisk is an open-source private branch exchange PBX. Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE RFC 3428 authentication do not get proper alignment. An authenticated attacker...

CVE-2024-42385: Improper Neutralization of Delimiters

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

PT-2024-29919

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose Web Server version 7.14 Description The issue involves improper neutralization of delimiters, which can trigger an infinite loop bug if the input string contains unexpected characters. This is due to the improper handling of...

CVE-2024-42392: Improper Neutralization of Delimiters

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...