4585 matches found
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.106)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-52520 Source advisory: OSV:GHSA-WR62-C79Q-CV37...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-52520 Source...
cn.hutool.v7:hutool-http (7.0.0-m1), com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10) +79 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.8)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-52434 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-52434 Source...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7537 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.42)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-52520 Source advisory: OSV:GHSA-WR62-C79Q-CV37...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-52434 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.106)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-52434 Source advisory: GHSA-4J3C-42XV-3F84...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7537 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.42)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-52520 Source advisory: GHSA-WR62-C79Q-CV37...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7537 more potentially affected by CVE-2025-53506 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.42)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-53506 Source advisory: MEND:CVE-2025-53506...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-53506 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.106)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-53506 Source advisory: MEND:CVE-2025-53506...
cn.hutool.v7:hutool-http (7.0.0-m1), com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10) +79 more potentially affected by CVE-2025-53506 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.8)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.106)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-52520 Source advisory: MEND:CVE-2025-52520...
cn.hutool.v7:hutool-http (7.0.0-m1), com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10) +79 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.8)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7537 more potentially affected by CVE-2025-52520 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.42)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-52520 Source advisory: MEND:CVE-2025-52520...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-52434 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.106)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-52434 Source advisory: MEND:CVE-2025-52434...
Important: firefox
Issue Overview: A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox or tag, potentially making a website vulnerable to a cross-site scripting attack. CVE-2025-6430 Affected Packages: firefox Issue Correction: Run dnf update firefox...
DRUPAL-CONTRIB-2025-087
This module provides a format filter, which allows you to "disable" iframes e.g. remove their src attribute specified by the user. These elements will be enabled again, once the Cookies banner is accepted. The module doesn't sufficiently filter user-supplied content when their value might contain...
CKEditor GHS XSS
The vulnerability of the General HTML Support function and the HTML embed panel in the Block Toolbar WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to carry out XSS attacks remotely...
OESA-2025-1718 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...
OESA-2025-1720 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...
Security Bulletin: Security vulnerabilities related to tomcat-embed-core library in IBM Business Automation Manager Open Editions.
Summary Multiple vulnerabilities related to tomcat-embed-core library were addressed in IBM Business Automation Manager Open Editions 9.2.1. Vulnerability Details CVEID:CVE-2025-49125 DESCRIPTION: Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using...