Lucene search
+L

4482 matches found

EUVD
EUVD
•added 2025/10/24 10:08 a.m.•19 views

EUVD-2025-35829

SSRF and Reflected XSS Vulnerabilities exist in multiple WSO2 products within the deprecated Try-It feature, which was accessible only to administrative users. This feature accepted user-supplied URLs without proper validation, leading to server-side request forgery SSRF. Additionally, the...

5.9CVSS5.8AI score0.00616EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/24 12:00 a.m.•13 views

Fedora 44 : bind / bind-dyndb-ldap (2025-5a73e9e251)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-5a73e9e251 advisory. Update to 9.18.41 rhbz2405786 Security fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

8.6CVSS7AI score0.10737EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/10/15 8:37 p.m.•19 views

OpenSearch Data Prepper uses deprecated SSL protocol identifier

Impact The GeoIP processor and Kafka source and buffer were using the deprecated "SSL" protocol identifier when creating SSL contexts, potentially allowing the use of insecure SSL protocols instead of modern TLS versions. Multiple Data Prepper plugins used SSLContext.getInstance"SSL" which could...

7.4AI score
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/10/15 8:37 p.m.•19 views

GHSA-28GG-8QQJ-FHH5 OpenSearch Data Prepper uses deprecated SSL protocol identifier

Impact The GeoIP processor and Kafka source and buffer were using the deprecated "SSL" protocol identifier when creating SSL contexts, potentially allowing the use of insecure SSL protocols instead of modern TLS versions. Multiple Data Prepper plugins used SSLContext.getInstance"SSL" which could...

4.8CVSS7.4AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/15 8:37 p.m.•14 views

EUVD-2025-34677

OpenSearch Data Prepper uses deprecated SSL protocol identifier...

6.6AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/09 10:15 p.m.•19 views

EUVD-2025-33578

Amazon.IonDotnet is vulnerable to Denial of Service attacks...

8.7CVSS5.8AI score0.00435EPSS
SaveExploits0References6
NVD
NVD
•added 2025/10/09 6:15 p.m.•23 views

CVE-2025-11573

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS0.00435EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/10/09 5:48 p.m.•11 views

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/09 5:48 p.m.•7 views

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS5.7AI score0.00435EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/09 5:48 p.m.•45 views

CVE-2025-11573

CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...

8.7CVSS5.7AI score0.00435EPSS
SaveExploits0References3
GitLab Advisory Database
GitLab Advisory Database
•added 2025/10/09 12:00 a.m.•28 views

Amazon.IonDotnet is vulnerable to Denial of Service attacks

Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will not receiv...

8.7CVSS5.8AI score0.00435EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2021-19465

Malware in sbrugna...

4.4CVSS5.6AI score0.004EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2017-16577

Malware in sbrugna...

9.3CVSS7.5AI score0.01083EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2018-10492

Malware in sbrugna...

6.1CVSS6.3AI score0.02321EPSS
SaveExploits5References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-0333

Malware in sbrugna...

9.8CVSS8.1AI score0.0276EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-0118

Malware in sbrugna...

6.3CVSS6.7AI score0.01132EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2015-8791

Malware in sbrugna...

6.1CVSS7AI score0.02959EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-15605

Malware in sbrugna...

6.5CVSS6.3AI score0.01017EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-13357

Malware in sbrugna...

9.8CVSS7.4AI score0.04428EPSS
SaveExploits0References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-21687

Malware in sbrugna...

9.8CVSS9.2AI score0.01256EPSS
SaveExploits0References4
Rows per page
Query Builder