10167 matches found
CVE-2025-1220
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions like fsockopen lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parseurl treat the hostname in different way, thus openin...
CVE-2025-53865
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...
CVE-2025-34095
An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute code, which is then persisted on...
GHSA-XWMG-2G98-W7V9 vulnerabilities
Vulnerabilities for packages: wildfly, druid, tez, akhq, dependency-track, apache-nifi, apicurio-registry, spark, flyway, apache-nifi-registry...
CVE-2025-53864 vulnerabilities
Vulnerabilities for packages: wildfly, druid, tez, akhq, dependency-track, apache-nifi, apicurio-registry, spark, flyway, apache-nifi-registry...
CVE-2025-53864 vulnerabilities
Vulnerabilities for packages: akhq, camunda-zeebe, hadoop-client-modules, tez, druid, flyway, nacos-docker, apicurio-registry, nacos, elasticsearch, apache-nifi, dependency-track, apache-nifi-registry, spark, wildfly...
GHSA-XWMG-2G98-W7V9 vulnerabilities
Vulnerabilities for packages: akhq, camunda-zeebe, hadoop-client-modules, tez, druid, flyway, nacos-docker, apicurio-registry, nacos, elasticsearch, apache-nifi, dependency-track, apache-nifi-registry, spark, wildfly...
CVE-2025-7464
A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...
CVE-2025-7464
A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-3777 vulnerabilities
Vulnerabilities for packages: text-generation-inference, nemo...
GHSA-5HQ9-5R78-2GJH vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2025-6211 vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2025-48924
Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass... can throw StackOverflowError on very long input...
CVE-2025-48924
Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass... can throw StackOverflowError on very long input...
CVE-2025-45582
Removed by vendor...
CVE-2025-53864
Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2i...
CVE-2025-53628
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitting an attacker to explore this to allocate memory arbitrarily. This vulnerability is fixed in 0.20.1. NOTE: This vulnerability is related...
CVE-2025-53506
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1...