6378 matches found
SUSE-SU-2025:03273-1 Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers bsc1248737...
CLSA-2025-1758035415 httpd: Fix of 2 CVEs
CVE-2024-47252: escape characters are now properly handled in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to mitigate HTTP desynchronisation attack...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-h2 (SUSE-SU-2025:03199-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03199-1 advisory. - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers bsc1248737 Tenable h...
CVE-2024-45669
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...
SUSE-SU-2025:03199-1 Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers bsc1248737...
IBM Security Verify Information Queue Denial of Service Vulnerability
IBM Security Verify Information Queue is a microservices architecture integration platform that leverages Kafka technology and a publish/subscribe model to integrate data between IBMSecurity products, acting as a cross-product data exchange hub. A denial of service vulnerability exists in IBM...
httpd: insufficient escaping of user-supplied data in mod_ssl
A vulnerability was found in the Apache HTTP Server. Insufficient escaping of user-supplied data in modssl allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to...
CVE-2024-45669
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...
CVE-2024-45669
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...
CVE-2024-45669
CVE-2024-45669 affects IBM Security Verify Information Queue (ISIQ) versions 10.0.5–10.0.8. The vulnerability arises from improper handling of special characters, leading to uncontrolled resource consumption and a denial of service when processed remotely. The issue is documented across multiple ...
CVE-2024-45669 IBM Security Verify Information Queue denial of service
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...
CVE-2024-45669 IBM Security Verify Information Queue denial of service
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...
PT-2025-37093
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue versions 10.0.5 through 10.0.8 Description: IBM Security Verify Information Queue versions 10.0.5, 10.0.6, 10.0.7, and 10.0.8 may allow a remote user to cause a denial of service due to improper handling ...
Linux Distros Unpatched Vulnerability : CVE-2022-39243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NuProcess is an external process execution implementation for Java. In all the versions of NuProcess where it forks processes by using the JVM's...
CVE-2025-34175 Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting
In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...
SUSE-SU-2025:20657-1 Security update for aide
This update for aide fixes the following issues: - CVE-2025-54389: Escape control characters in report and log output bsc1247884. - CVE-2025-54409: Fix null pointer dereference after reading incorrectly encoded xattr attributes from database bsc1247885...
Security update for aide
This update for aide fixes the following issues: CVE-2025-54389: Escape control characters in report and log output bsc1247884. CVE-2025-54409: Fix null pointer dereference after reading incorrectly encoded xattr attributes from database bsc1247885. Patch Instructions: To install this SUSE update...
D-Link DIR-852 os Command Injection Vulnerability
D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from an os command injection vulnerability, which stems from the parameter service in the file soap.cgi...
