Lucene search
+L

5817 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/10/21 5:59 p.m.8 views

Security Bulletin: Vulnerability in Apache Commons Lang (CVE-2025-48924) affects IBM PowerVM Novalink.

Summary Apache Commons Lang is used by IBM PowerVM Novalink. IBM PowerVM Novalink has addressed the applicable CVE CVE-2025-48924. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting...

5.3CVSS8.7AI score0.02164EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/20 8:1 p.m.7 views

CVE-2025-11896

A flaw was found in Xpdf. A PDF object loop in a CMap, via the "UseCMap" entry leads to an infinite recursion and a stack overflow, resulting in an application crash...

2.1CVSS6.5AI score0.0016EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/10/20 10:1 a.m.6 views

kernel: eventpoll: Fix semi-unbounded recursion

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

7.8CVSS5.7AI score0.00172EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/20 12:0 a.m.36 views

CAPE 安全漏洞

CAPE is a malware sandbox by the individual developer Kevin OReilly. CAPE has a security vulnerability that stems from an analysis denial vulnerability in reporting/mongodb.py and reporting/jsondump.py, which allows an attacker to submit samples to generate deeply nested or oversized behavioral...

7.5CVSS6.8AI score0.00331EPSS
SaveExploits1References4
CVE
CVE
added 2025/10/20 12:0 a.m.39 views

CVE-2025-61301

CVE-2025-61301 affects CAPEv2; the denial-of-analysis occurs in reporting/mongodb.py and reporting/jsondump.py (commit 52e4b43, 2025-05-17). Deeply nested or oversized behavior data can cause MongoDB BSON limits or orjson recursion errors when a sample runs in the sandbox, leading to incomplete o...

7.5CVSS6.4AI score0.00331EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/20 12:0 a.m.23 views

RHEL 10 : kernel (RHSA-2025:18318)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18318 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86/hyper-v: Skip...

9.8CVSS7.1AI score0.00438EPSS
SaveExploits0References15
Cvelist
Cvelist
added 2025/10/20 12:0 a.m.19 views

CVE-2025-61301

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

0.00331EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/20 12:0 a.m.11 views

Oracle Linux 10 : kernel (ELSA-2025-18318)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18318 advisory. - scsi: lpfc: Fix buffer free/clear order in deferred receive path CKI Backport Bot RHEL-119125 CVE-2025-39841 - efivarfs: Fix slab-out-of-bounds in...

9.8CVSS7.2AI score0.00438EPSS
SaveExploits0References7
OSV
OSV
added 2025/10/18 8:6 a.m.14 views

RLSA-2025:17760 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 kernel: eventpoll: Fix semi-unbounded recursion CVE-2025-38614 kernel: ALSA: usb-audio: Validate UAC3 cluster segment...

7.1CVSS6.5AI score0.00175EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2025/10/18 8:6 a.m.15 views

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

7.8CVSS6.5AI score0.00175EPSS
SaveExploits0
OSV
OSV
added 2025/10/17 5:40 p.m.4 views

JLSEC-2025-91 Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a...

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions xmlXPathRunEval, xmlXPathCtxtCompile, and xmlXPathEvalExpr were resetting recursion depth to zero before...

5.5CVSS6.3AI score0.00155EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/17 2:56 p.m.7 views

OESA-2025-2480 poppler security update

is a PDF rendering library. Security Fixes: Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in...

8.6CVSS6.7AI score0.0016EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/17 2:8 p.m.4 views

Security Bulletin: IBM Application Modernization Accelerator Developer Tools is affected by an Uncontrolled Recursion vulnerability due to Apache Commons Lang (CVE-2025-48924)

Summary There is a vulnerability in Apache Commons Lang used by IBM Application Modernization Accelerator Developer Tools. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...

5.3CVSS6.6AI score0.02164EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/17 12:31 a.m.10 views

EUVD-2025-34838

In Xpdf 4.05 and earlier, a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow...

2.1CVSS6.4AI score0.0016EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/16 10:15 p.m.6 views

UBUNTU-CVE-2025-11896

In Xpdf 4.05 and earlier, a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow...

2.1CVSS5.8AI score0.0016EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/16 9:59 p.m.14 views

CVE-2025-11896

CVE-2025-11896 affects Xpdf 4.05 and earlier, due to a PDF CMap object loop that can cause infinite recursion and a stack overflow. Public references in Fedora (xpdf 4.06 security update) and multiple SUSE/openSUSE advisories indicate the vulnerability is resolved by upgrading to a newer release ...

2.1CVSS6.5AI score0.0016EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/16 6:57 a.m.3 views

Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by a vulnerability in commons-lang3-3.17.0.jar (CVE-2025-48924)

Summary IBM Sterling Connect:Direct Web Services is affected by an uncontrolled recursion vulnerability in commons-lang3-3.17.0. This has been addressed in new fixpacks available from Fix Central. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apac...

5.3CVSS6.7AI score0.02164EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/16 12:0 a.m.9 views

PT-2025-42549

Name of the Vulnerable Software and Affected Versions Xpdf versions prior to 4.06 Description A flaw exists in Xpdf versions 4.05 and earlier related to PDF object handling within CMap structures. Specifically, a loop in a CMap, triggered through the "UseCMap" entry, can result in infinite...

2.1CVSS6.5AI score0.0016EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.21 views

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, including text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf 4.05 and earlier versions, which stems from a loop in the PDF object in CMap that leads to infinite recursion, potentially resulting in a...

2.1CVSS6.4AI score0.0016EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/16 12:0 a.m.5 views

AlmaLinux 9 : kernel (ALSA-2025:17760)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:17760 advisory. kernel: HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 kernel: eventpoll: Fix semi-unbounded recursion CVE-2025-38614 kernel: ALSA:...

7.8CVSS7.4AI score0.00175EPSS
SaveExploits0References6
Rows per page
Query Builder