Number withdrawal

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

Number withdrawal

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

Number withdrawal

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

Drupal core security vulnerabilities

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal core that stems from improper authorization and could lead to forced browsing...

Virtuoso-OpenSource DoS

The vulnerability of the dfebodycopy component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

virtuoso-opensource Row Insert Cast DoS

The vulnerability of the rowinsertcast component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

Virtuoso-OpenSource qst_vec_get_int64 DoS

The vulnerability of the qstvecgetint64 component in the Virtuoso-OpenSource web application development platform is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted SQL...

Virtuoso-OpenSource sqlo_expand_jts DoS

The vulnerability of the sqloexpandjts component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

Virtuoso-OpenSource DoS

The vulnerability of the dfeunitgbdependant component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending special...

sqlgplace_dpipes Component DoS

The vulnerability of the sqlgplacedpipes component in the Virtuoso-opensource web application development platform involves the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...

virtuoso-opensource chash_array DoS

The vulnerability of the chasharray component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQ...

Virtuoso-OpenSource sqlgvec_upd DoS

The vulnerability of the sqlgvecupd component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

virtuoso-opensource dc_elt_size DoS

The vulnerability of the dceltsize component in the virtuoso-opensource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

Virtuoso-OpenSource dc_add_int DoS

The vulnerability of the dcaddint component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQL...

virtuoso-opensource numeric_to_dv DoS

The vulnerability of the numerictodv component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially craft...

Virtuoso-OpenSource sqlc_add_distinct_node DoS

The vulnerability of the sqlcadddistinctnode component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

Number withdrawal

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

Virtuoso-OpenSource box_deserialize_string DoS

The vulnerability of the boxdeserializestring component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

CVE-2025-29928

authentik is an open-source identity provider. Prior to versions 2024.12.4 and 2025.2.3, when authentik was configured to use the database for session storage which is a non-default setting, deleting sessions via the Web Interface or the API would not revoke the session and the session holder wou...

Security Bulletin: IBM Automation Decision Services for Jan 2025 - Multiple CVEs addressed

Summary IBM Automation Decision Services is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2024-3596...