PT-2026-120167

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client cli present gateway message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,...

app.commerce-io:spring-boot-starter-data-search-jpa (>=1.1.0-rc1, <=1.3.0-rc1), au.org.consumerdatastandards:client-cli (>=1.13.0, <=2.2.0) +1455 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.12)

org.springframework:spring-web MAVEN version 5.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - app.commerce-io:spring-boot-starter-data-search-jpa =1.1.0-rc1, =1.13.0, =1.13.0, =0.0.1-alpha,...

PT-2010-5026

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB version 9.5 before FP6a Description The issue allows remote authenticated users to cause a denial of service, resulting in a database server ABEND. This can be achieved by executing a prepared statement with a large number of...