CVE-2012-1035

AdaCore Ada Web Services AWS before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2024-41708

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

PT-2024-29528 · Adacore · Ada Web Services

Name of the Vulnerable Software and Affected Versions: AdaCore ada web services version 20.0 Description: An issue was discovered that allows an attacker to escalate privileges and steal sessions via the Random String function in the src/core/aws-utils.adb module. This issue affects AdaCore ada w...