3432 matches found
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to a deny of service attack due to the Netty package (CVE-2025-55163)
Summary Netty is used by DataStage on Cloud Pak for Data as part of the API processing functionality. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable ...
USN-7843-1 netty vulnerability
It was discovered that Netty did not properly handle user input. A remote attacker could possibly use this issue to forge arbitrary emails from a trusted server...
USN-7843-1: Netty vulnerability
It was discovered that Netty did not properly handle user input. A remote attacker could possibly use this issue to forge arbitrary emails from a trusted server...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in reactor-netty-http
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in reactor-netty-http Vulnerability Details CVEID:CVE-2025-22227 DESCRIPTION: In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen,...
Linux Distros Unpatched Vulnerability : CVE-2025-59419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SM...
CVE-2025-11253
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.This issue affects Netty ERP: before V.1.1000...
netty-4.1.128-1.1 on GA media (moderate)
netty-4.1.128-1.1 on GA media Announcement ID: openSUSE-SU-2025:15667-1 Rating: moderate Cross-References: CVE-2025-59419 CVSS scores: CVE-2025-59419 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2025-59419 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N...
OESA-2025-2526 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
OESA-2025-2529 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
OESA-2025-2530 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
OESA-2025-2528 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
CVE-2025-11253
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
CVE-2025-11253
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
CVE-2025-11253
CVE-2025-11253 describes an SQL Injection in Netty ERP by Aksis Technology Inc. The issue arises from improper neutralization of special elements in SQL commands, enabling injection in versions prior to V.1.1000 . Multiple sources (NVD/Red Hat/CVE List/CNNVD, PT Security) corroborate the vulnerab...
CVE-2025-11253 SQLi in Aksis Technologies' Netty ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
CVE-2025-11253 SQLi in Aksis Technologies' Netty ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
EUVD-2025-35805
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.This issue affects Netty ERP: before V.1.1000...
Aksis Netty ERP SQL注入漏洞
Aksis Netty ERP is an enterprise resource planning software from Aksis Turkey. An SQL injection vulnerability exists in Aksis Netty ERP versions prior to V.1.1000, which stems from improper neutralization of special elements and can lead to SQL injection attacks...
PT-2025-43604
Name of the Vulnerable Software and Affected Versions Aksis Technology Inc. Netty ERP versions prior to V.1.1000 Description Netty ERP contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a SQL Injection issue. This allows for the potential executi...