3358 matches found
CLSA-2025-1760022663 libtiff: Fix of CVE-2017-5225
CVE-2017-5225: fix heap buffer overflow in tools/tiffcp by restricting BitsPerSample values...
EUVD-2025-31843
A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of the file /module/employee/controller.php?action=reset of the component Query Parameter Handler. Performing manipulation of the argument ID results in cross site scripting. It is...
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
Summary Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing a remote attacker to exhaust memory and cause a denial of...
CVE-2025-61772
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory witho...
CVE-2025-61772
Rack’s CVE-2025-61772 affects Rack::Multipart::Parser, which can accumulate unbounded per-part headers if a multipart part header never ends with a blank line. This leads to memory exhaustion and DoS on affected versions prior to 2.2.19, 3.1.17, and 3.2.2. The fix caps per-part header size (e.g.,...
CVE-2025-61772 Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory witho...
CVE-2025-61770
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser buffers the entire multipart preamble bytes before the first boundary in memory without any size limit. A client can send a large preamble followed by a valid boundary, causing...
EUVD-2010-1875
Malware in sbrugna...
EUVD-2020-17340
Malware in sbrugna...
EUVD-2007-4830
Malware in sbrugna...
EUVD-2011-2180
Malware in sbrugna...
EUVD-2010-2269
Malware in sbrugna...
EUVD-2012-6555
Malware in sbrugna...
EUVD-2012-0918
Malware in sbrugna...
EUVD-2019-8782
Malware in sbrugna...
EUVD-2020-17342
Malware in sbrugna...
EUVD-2010-2268
Malware in sbrugna...
EUVD-2012-0919
Malware in sbrugna...