FreeBSD : mediawiki -- multiple vulnerabilities (d58726ff-ef5e-11ee-8d8e-080027a5b8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d58726ff-ef5e-11ee-8d8e-080027a5b8e9 advisory. - Mediawiki reports: T355538, CVE-2024-PENDING SECURITY: XSS in edit summary parser. T357760,...

PT-2024-23734 · Jjwt · Jjwt

Name of the Vulnerable Software and Affected Versions: JJWT aka Java JWT through 0.12.5 Description: The issue concerns JJWT ignoring certain characters, potentially leading a user to falsely conclude they have a strong key. The impacted code includes the setSigningKey method within the...

[SECURITY] Fedora 39 Update: ghc-toml-parser-1.3.2.0-29.fc39

TOML parser using generated lexers and parsers with careful attention to the TOML 1.0.0 semantics for defining tables...

Fedora 39 : ghc-base64 / ghc-hakyll / ghc-isocline / ghc-toml-parser / gitit / etc (2024-b458482d48)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-b458482d48 advisory. Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: - backport fixes for CVE-2023-35936 and CVE-2023-38745 pandoc-cli: - new package for pand...

OESA-2024-1340 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: Heap-based buffer overflow in the subparse subtitle parser when handling certain SRT subtitle files in GStreamer versions before 1.22....

OESA-2024-1338 nodejs-qs security update

This is a query string parser for node and the browser supporting nesting, as it was removed from 0.3.x, so this library provides the previous and commonly desired behavior and twice as fast. Used by express, connect and others. Security Fixes: qs before 6.10.3, as used in Express before 4.17.3 a...

[SECURITY] Fedora 40 Update: ghc-toml-parser-1.3.2.0-29.fc40

TOML parser using generated lexers and parsers with careful attention to the TOML 1.0.0 semantics for defining tables...

Fedora: Security Advisory for ghc-toml-parser (FEDORA-2024-7d83cbccb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

Riverline/multipart-parser is vulnerable to Denial of Service DoS. The vulnerability is due to the lack of limits on the length of header lines, allowing attackers to overwhelm server resources by sending requests with exceptionally long headers, potentially leading to Denial of Service DoS...

PT-2025-3588

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library versions 2.0.16 and earlier Description A heap-based buffer over-read issue occurs when parsing triples with the nquads parser in the raptor ntriples parse term internal function. This issue affects the Raptor RDF...

python-aiohttp: http request smuggling

An HTTP request smuggling vulnerability was found in aiohttp. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets that must trigger error handling to robustly match frame boundaries of proxies in order to protect against the injection of...

Serverless Billing Attack

bref/bref is vulnerable to Serverless Billing Attack. The vulnerability is due to slow multi-byte string operations performed on the Content-Type header values in the Riverline/multipart-parser library used by Bref. It allows an attacker to send specially crafted requests, causing long operations...

CLSA-2024-1711492242 squid: Fix of CVE-2024-25617

CVE-2024-25617: Fix denial of service in HTTP header parser...

squid: Fix of CVE-2024-25617

CVE-2024-25617: Fix denial of service in HTTP header parser...

CLSA-2024-1711491615 squid: Fix of CVE-2024-25617

CVE-2024-25617: Fix denial of service in HTTP header parser...

AZL-42552 CVE-2023-6175 affecting package wireshark for versions less than 4.4.7-1

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...

DEBIAN-CVE-2023-6175

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...

CVE-2023-6175

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...

UBUNTU-CVE-2023-6175

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...

CVE-2023-6175 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...