CVE-2025-61935

When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-55669

CVE-2025-55669 affects BIG-IP, specifically the HTTP/2 vulnerability impacting the Advanced WAF/ASM stack. Undisclosed traffic can terminate the Traffic Management Microkernel (TMM), causing DoS on new connections. Connected advisories list vulnerable branches and fixes: for BIG-IP ASM the fix is...

EUVD-2018-0805

Malware in sbrugna...

Design/Logic Flaw

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

PT-2018-3674

Name of the Vulnerable Software and Affected Versions Apache Derby versions 10.3.1.4 through 10.14.1.0 Description The issue is related to insufficient input validation in the Apache Derby database management system. This can be exploited by a remote attacker to impact the integrity of protected...