org.apache.camel.karaf:camel-jetty-common (>=4.18.1, <=4.18.4), org.apache.camel.springboot:camel-jetty-starter (>=4.15.0, <=4.18.4) +4 more potentially affected by CVE-2026-85313 via org.apache.camel:camel-jetty-common (>=4.15.0, <=4.18.4)

org.apache.camel:camel-jetty-common MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.15.0, =5.2-m1, =5.2-m1, =0.5.5, =0.5.6 Source cves: CVE-2026-85313 Source advisory: MEND:CVE-2026-85313...

PT-2026-85287

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A buffer overflow exists in the StringToIvPFunction function. The issue occurs when dimension, piece, and degree counts from encoded BHV IPF payloads are used as allocation sizes and loop bounds...

Malicious code in @zalastax/nolb-ipf (npm)

The package @zalastax/nolb-ipf was found to contain malicious code. --- Credit: OpenSSF source...

com.kerb4j:kerb4j-server-tomcat (>=0.0.6, <=0.1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.27) +5 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.27)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.kerb4j:kerb4j-server-tomcat =0.0.6, =0.1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.27...

org.apache.camel.kafkaconnector:camel-mina-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.karaf:camel-mina (>=4.7.0, <=4.14.5) +6 more potentially affected by CVE-2026-40473 via org.apache.camel:camel-mina (>=3.0.0, <=4.14.5)

org.apache.camel:camel-mina MAVEN version =3.0.0, =0.1.0, =4.7.0, =3.0.0, =4.0.0, =4.0.0, =4.0.0, =4.3.2 Source cves: CVE-2026-40473 Source advisory: GHSA-VPR3-2659-RW55...

org.apache.camel.kafkaconnector:camel-mina-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.karaf:camel-mina (>=4.7.0, <=4.14.5) +6 more potentially affected by CVE-2026-40473 via org.apache.camel:camel-mina (>=3.0.0, <=4.14.5)

org.apache.camel:camel-mina MAVEN version =3.0.0, =0.1.0, =4.7.0, =3.0.0, =4.0.0, =4.0.0, =4.0.0, =4.3.2 Source cves: CVE-2026-40473 Source advisory: MEND:CVE-2026-40473...

org.apache.cxf.fediz:fediz-tomcat8 (1.4.5), org.apache.tomcat:tomcat-catalina (8.5.34) +7 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.34)

org.apache.tomcat:tomcat-coyote MAVEN version 8.5.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 1.4.5 - org.apache.tomcat:tomcat-catalina 8.5.34 -...

Intel® SoC Thermal IPF Extension Provider Software Advisory

Summary: A potential security vulnerability in some SoC Thermal Innovation Platform Framework Extension Provider Intel® SoC Thermal IPF Extension Provider software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Detail...

MAL-2025-12048 Malicious code in @zalastax/nolb-ipf (npm)

The package @zalastax/nolb-ipf was found to contain malicious code...

Malicious code in @zalastax/nolb-ipf (npm)

The package @zalastax/nolb-ipf was found to contain malicious code...

ipf-nordwind.de Improper Access Control vulnerability OBB-3819146

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-4212: Improper Neutralization of Input During Web Page Generation

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ipf' parameter on the 'chainedquizlist' page in versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

WordPress plugin Chained Quiz has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-26265 · WordPress · Chained Quiz

Name of the Vulnerable Software and Affected Versions: Chained Quiz plugin for WordPress versions up to, and including, 1.3.2 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to...

freebsd/x86 setuid(0); execve(ipf -Fa); shellcode 57 bytes

No description provided by source. ; sm4x - 2008 ; setuid0; execve//sbin/ipf, //sbin/ipf, -Faa, 0, 0; ; 57 bytes ; FreeBSD 7.0-RELEASE global start start: main: ; --------------------- setuid 0 xor eax, eax xor ecx, ecx push eax push eax mov al, 0x17 int 0x80 ; --------------------- -Faa xor eax,...

CVE-2010-2091: Improper Neutralization of Input During Web Page Generation

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

Solaris Update for ipf 141505-07

Check for the Version of ipf OpenVAS Vulnerability Test Solaris Update for ipf 141505-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for ipf 141505-07

Check for the Version of ipf OpenVAS Vulnerability Test Solaris Update for ipf 141505-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for ipf 141506-07

Check for the Version of ipf OpenVAS Vulnerability Test Solaris Update for ipf 141506-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for ipf 141506-07

Check for the Version of ipf OpenVAS Vulnerability Test Solaris Update for ipf 141506-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...