1558 matches found
Relative Path Traversal
Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Relative Path Traversal via the URL normalization. An attacker can bypass security constraints and access restricted directories suc...
CVE-2025-55752 Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled
Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the...
PT-2025-43461
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists where a file path filter designed to restrict access to sensitive directories can be bypassed due to incorrect unicode normalization. This could allow a local user to gain elevated...
[SECURITY] [DLA 4343-1] raptor2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4343-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 22, 2025 https://wiki.debian.org/LTS -...
`unic-normal` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer - unicode-normalization...
RUSTSEC-2025-0079 `unic-ucd-hangul` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer - unicode-normalization...
`unic-ucd-hangul` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer - unicode-normalization...
RUSTSEC-2025-0082 `unic-normal` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer - unicode-normalization...
Security update for rubygem-puma
This update for rubygem-puma fixes the following issues: Update to version 5.6.9. CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks bsc1230848, fixed in an earlier update. CVE-2024-21647: unbounded resource consumpti...
EUVD-2016-3636
Malware in sbrugna...
EUVD-2010-4711
Malware in sbrugna...
EUVD-2021-1573
Malware in sbrugna...
EUVD-2016-10056
Malware in sbrugna...
EUVD-2008-3159
Malware in sbrugna...
EUVD-2016-3149
Malware in sbrugna...
EUVD-2018-0545
Malware in sbrugna...
EUVD-2014-5163
Malware in sbrugna...
EUVD-2020-0333
Malware in sbrugna...