CLSA-2026-1787149537 openjpeg2: Fix of 2 CVEs

CVE-2025-50952: fix NULL pointer dereference in opjdwtdecodetile - CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing...

CLSA-2026-1786708350 openjpeg2: Fix of 2 CVEs

CVE-2025-50952: fix NULL pointer dereference in opjdwtdecodetile - CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing...

eph-stockstadt.de Improper Access Control vulnerability OBB-3767124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

com.microsoft.azure:azure-eventhubs-eph (0.7.2) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.2)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.7.2 Source cves: CVE-2020-16971 Source advisory...

com.microsoft.azure:azure-eventhubs-eph (0.7.7) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.7)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.7.7 Source cves: CVE-2020-16971 Source advisory...

com.microsoft.azure:azure-eventhubs-eph (0.7.8) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.8)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.7.8 Source cves: CVE-2020-16971 Source advisory...

com.microsoft.azure:azure-eventhubs-eph (0.8.1) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.8.1)

com.microsoft.azure:azure-eventhubs MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.8.1 Source cves: CVE-2020-16971 Source advisory...

com.erudika:para-server (>=1.24.0, <=1.28.4), com.erudika:para-war (>=1.24.4, <=1.28.4) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.11.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.erudika:para-server =1.24.0, =1.24.4, =1.28.4 -...

com.microsoft.azure:azure-eventhubs-eph (>=0.14.0, <=0.14.1), com.microsoft.azure:spark-streaming-eventhubs_2.11 (>=2.0.7, <=2.1.1) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.14.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph =0.14.0, =2.0.7, =2.0.7, =2.0.7, =2.1.1 Source...

com.erudika:para-jar (>=1.30.0, <=1.31.0), com.erudika:para-server (>=1.28.5, <=1.31.0) +6 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.15.1)

com.microsoft.azure:azure-eventhubs MAVEN version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.erudika:para-jar =1.30.0, =1.28.5, =1.28.5, =3.3.0, =0.1.5, =0.1.5, =0.1.13 Source...

com.microsoft.azure:azure-eventhubs-eph (2.0.1), com.microsoft.azure:azure-eventhubs-spark_2.11 (>=2.2.2, <=2.3.2) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (1.0.2)

com.microsoft.azure:azure-eventhubs MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.0.1 -...

com.microsoft.azure:azure-eventhubs-eph (0.12.0) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.12.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.12.0 Source cves: CVE-2020-16971 Source...

com.microsoft.azure:azure-eventhubs-eph (0.10.0), io.zipkin.azure:zipkin-autoconfigure-collector-eventhub (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.10.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.10.0 -...

com.microsoft.azure:azure-eventhubs-eph (0.8.0) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.8.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.8.0 Source cves: CVE-2020-16971 Source advisory...

com.microsoft.azure:azure-eventhubs-eph (2.1.0) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (1.3.0)

com.microsoft.azure:azure-eventhubs MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.1.0 Source cves: CVE-2020-16971 Source advisory...

com.microsoft.azure.iot:iothub-react_2.11 (0.9.0), com.microsoft.azure.iot:iothub-react_2.12 (0.9.0) +4 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.13.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure.iot:iothub-react2.11 0.9.0 - com.microsoft.azure.iot:iothub-react2.1...

CVE-2009-4385

CVE-2009-4385 describes multiple CSRF vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH). Attackers can hijack user authentication to perform delete_poll (index.php) and administrator authentication to delete users (admin.php) or send arbitrary email (admin.php). The affected components are th...

CVE-2009-4384

CVE-2009-4384 affects Scriptsez.net Ez Poll Hoster (EPH). The vulnerabilities are cross-site scripting (XSS) via two parameters: the pid parameter in a code action to index.php and the uid parameter in a view action to profile.php. Root cause: insufficient input validation allowing injection of a...