PT-2025-14806 · Unknown · Iglu Server

Name of the Vulnerable Software and Affected Versions: Iglu Server versions 0.13.0 and below Description: The issue can render Iglu Server completely unresponsive, which would eventually halt event processing in the pipeline if not restored. It involves an authenticated endpoint and is similar to...

CVE-2024-47212

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47217

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2024-47214

A security vulnerability exists in Iglu Server version 0.13.0 and below , a RESTful schema registry. The issue involves a malicious payload that can render the service completely unresponsive, potentially causing event processing in the pipeline to halt. At the time of the report, there is no inf...

CVE-2024-47217

A security vulnerability exists in Iglu Server versions 0.13.0 and below , an open-source RESTful mode registry by Snowplow. The issue involves an authenticated endpoint that can render the service completely unresponsive , which may eventually halt event processing in the pipeline if the operati...

CVE-2024-47212

An issue exists in Iglu Server version 0.13.0 and below where sending very large payloads to a specific API endpoint can cause uncontrolled resource consumption (CWE-400). This can render the service completely unresponsive, eventually causing event processing in the pipeline to halt. As a mitiga...

CVE-2024-47213

The Enrich security platform (versions 5.1.0 and below ) is vulnerable to a Denial of Service (DoS) condition. A maliciously crafted Snowplow event sent to the pipeline can cause the Enrich service to crash and enter an indefinite restart loop during the validation process, effectively halting ev...

PT-2025-14801

Name of the Vulnerable Software and Affected Versions Enrich versions 5.1.0 and below Description The issue involves sending a maliciously crafted Snowplow event to the pipeline, causing Enrich to crash and attempt to restart indefinitely, resulting in halted event processing. Recommendations For...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2024-47212

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2025-3038

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

GHSA-M5QC-5HW7-8VG7 image-size Denial of Service via Infinite Loop during Image Processing

Summary image-size is vulnerable to a Denial of Service vulnerability when processing specially crafted images. The issue occurs because of an infine loop in findBox when processing certain images with a box with size 0. Details If the first bytes of the input does not match any bytes in...

image-size Denial of Service via Infinite Loop during Image Processing

Summary image-size is vulnerable to a Denial of Service vulnerability when processing specially crafted images. The issue occurs because of an infine loop in findBox when processing certain images with a box with size 0. Details If the first bytes of the input does not match any bytes in...

CVE-2025-31624

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

SUSE CVE-2025-21911

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: avoid deadlock on fence release Do scheduler queue fence release processing on a workqueue, rather than in the release function itself. Fixes deadlock issues such as the following: 607.400437...

PT-2025-14538 · Npm · Image-Size

Summary image-size is vulnerable to a Denial of Service vulnerability when processing specially crafted images. The issue occurs because of an infine loop in findBox when processing certain images with a box with size 0. Details If the first bytes of the input does not match any bytes in...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : phpseclib vulnerabilities (USN-7404-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7404-1 advisory. It was discovered that phpseclib did not correctly handle RSA PKCS1 v1.5 signature verification. An attacker could...

AMD NPU driver input validation error vulnerability

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting integrity and availability...

CVE-2025-21986

In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chain. The semaphore is acquired for writing when adding / removing...