EUVD-2022-5347

Malicious code in bioql PyPI...

CVE-2008-7227

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...

CLSA-2024-1729193618 Fix CVE(s): CVE-2024-43802

SECURITY UPDATE: prevent heap-buffer overflow in typeahead buffer flushing - debian/patches/CVE-2024-43802.patch: fix heap-buffer-overflow in instypebuf by validating enough space left when flushing typeahead buffer - CVE-2024-43802...

CVE-2018-14642: Exposure of Sensitive Information to an Unauthorized Actor

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests...

CVE-2008-7227

Geoserver exposes a vulnerability CVE-2008-7227 in which PartialBufferOutputStream2 may flush buffer contents while handling an in-memory buffer, preventing service exceptions from being reported. Affected products are GeoServer prior to 1.6.1 and 1.7.0-beta1. The underlying cause is in PartialBu...