10395 matches found
EUVD-2025-206239
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a low privileged user member can invite a high privileged user. At first, the application will throw an error, but if the attacker clicks th...
com.vaadin:vaadin (>=24.9.0, <=24.9.6) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.9.0, <=24.9.6)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.9.0, =24.9.0, =24.9.6 Source cves: CVE-2025-15022 Source advisory: GHSA-7WWV-79XW-RVVG...
com.vaadin:vaadin (>=24.7.0, <=24.8.13) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.7.0, <=24.8.13)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.7.0, =24.7.0, =24.8.13 Source cves: CVE-2025-15022 Source advisory: OSV:GHSA-7WWV-79XW-RVVG...
com.vaadin:vaadin (>=24.9.0, <=24.9.6) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.9.0, <=24.9.6)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.9.0, =24.9.0, =24.9.6 Source cves: CVE-2025-15022 Source advisory: OSV:GHSA-7WWV-79XW-RVVG...
com.vaadin:vaadin (>=24.7.0, <=24.8.13) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.7.0, <=24.8.13)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.7.0, =24.7.0, =24.8.13 Source cves: CVE-2025-15022 Source advisory: GHSA-7WWV-79XW-RVVG...
com.vaadin:vaadin (>=23.1.0, <=23.1.17), com.vaadin:vaadin-jandex (>=23.1.0, <=23.1.17) +2 more potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=23.1.0, <=23.1.17)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =23.1.0, =23.1.0, =23.1.0, =23.1.0, =2.5.2, =2.5.3 Source cves: CVE-2025-15022 Source advisory: OSV:GHSA-7WWV-79XW-RVVG...
com.vaadin:vaadin (>=23.1.0, <=23.1.17), com.vaadin:vaadin-jandex (>=23.1.0, <=23.1.17) +2 more potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=23.1.0, <=23.1.17)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =23.1.0, =23.1.0, =23.1.0, =23.1.0, =2.5.2, =2.5.3 Source cves: CVE-2025-15022 Source advisory: GHSA-7WWV-79XW-RVVG...
com.vaadin:vaadin (>=24.7.0, <=24.8.13) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.7.0, <=24.8.13)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.7.0, =24.7.0, =24.8.13 Source cves: CVE-2025-15022 Source advisory: SNYK:JAVA-COMVAADIN-14860869...
com.vaadin:vaadin (>=23.1.0, <=23.1.17), com.vaadin:vaadin-jandex (>=23.1.0, <=23.1.17) +2 more potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=23.1.0, <=23.1.17)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =23.1.0, =23.1.0, =23.1.0, =23.1.0, =2.5.2, =2.5.3 Source cves: CVE-2025-15022 Source advisory: SNYK:JAVA-COMVAADIN-14860869...
com.vaadin:vaadin (>=24.9.0, <=24.9.5) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.9.0, <=24.9.5)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.9.0, =24.9.0, =24.9.5 Source cves: CVE-2025-15022 Source advisory: SNYK:JAVA-COMVAADIN-14860869...
com.vaadin:vaadin (>=24.9.0, <=24.9.6) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.9.0, <=24.9.6)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.9.0, =24.9.0, =24.9.6 Source cves: CVE-2025-15022 Source advisory: MEND:CVE-2025-15022...
CVE-2025-15022
CVE-2025-15022 describes an XSS vulnerability in Vaadin where caption HTML was not sanitized. Affected are Vaadin Framework 7 (7.0.0–7.7.49) and 8 (8.0.0–8.29.1), as well as Vaadin 23.1.0–23.6.5, Vaadin 24.0.0–24.8.13, and Vaadin 24.9.0–24.9.6. Fixed versions sanitize captions by default and, for...
com.vaadin:vaadin (>=24.7.0, <=24.8.13) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.7.0, <=24.8.13)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.7.0, =24.7.0, =24.8.13 Source cves: CVE-2025-15022 Source advisory: MEND:CVE-2025-15022...
com.vaadin:vaadin (>=23.1.0, <=23.1.17), com.vaadin:vaadin-jandex (>=23.1.0, <=23.1.17) +2 more potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=23.1.0, <=23.1.17)
com.vaadin:vaadin-spreadsheet-flow MAVEN version =23.1.0, =23.1.0, =23.1.0, =23.1.0, =2.5.2, =2.5.3 Source cves: CVE-2025-15022 Source advisory: MEND:CVE-2025-15022...
CVE-2025-15419 Open5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of service
A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locall...
CVE-2025-15419
Open5GS up to version 2.7.6 is affected by a vulnerability in the GTPv2-C Flow Handler, specifically the function sgwc_s5c_handle_create_session_response in src/sgwc/s5c-handler.c. Manipulation can cause a local denial of service. The attack requires local access, and public exploits are availabl...
CVE-2025-15419
A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locall...
CVE-2025-15419 Open5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of service
A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locall...
CVE-2025-15419: Improper Resource Shutdown or Release
A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locall...
