Lucene search
+L

8757 matches found

CNNVD
CNNVD
•added 2026/05/02 12:00 a.m.•29 views

Zyosoft School App 安全漏洞

Zyosoft School App is a mobile application designed for school management and parent-child communication by Zyosoft Technology Co., Ltd. of Taiwan, China. The Zyosoft School App has a security vulnerability, which stems from insecure direct object references. This vulnerability could allow...

8.6CVSS5.8AI score0.00443EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/02 12:00 a.m.•26 views

WordPress plugin App Builder – Create Native Android & iOS Apps On The Flight 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to th...

5.3CVSS5.8AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/01 2:14 p.m.•32 views

EUVD-2026-26573

In the Linux kernel, the following vulnerability has been resolved: gpib: lpvousb: fix memory leak on disconnect The driver iterates over the registered USB interfaces during GPIB attach and takes a reference to their USB devices until a match is found. These references are never released which...

5.8AI score0.0016EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/05/01 2:14 p.m.•26 views

CVE-2026-31760 gpib: lpvo_usb: fix memory leak on disconnect

In the Linux kernel, the following vulnerability has been resolved: gpib: lpvousb: fix memory leak on disconnect The driver iterates over the registered USB interfaces during GPIB attach and takes a reference to their USB devices until a match is found. These references are never released which...

5.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/05/01 2:14 p.m.•27 views

EUVD-2026-26545

In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochipadddatawithkey Since commit aab5c6f20023 "gpio: set device type for GPIO chips", gdev-dev.release is unset. As a result, the reference count to gdev-dev isn't dropped on the error...

5.9AI score0.00162EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/01 11:24 a.m.•16 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop when processing circular policy references. An attacker can cause denial of service by submitting malicious policy documents containing circular references. Remediation Upgrade org.apache.neethi:neethi to version 3.2.2 or...

8.7CVSS7.3AI score0.008EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/05/01 9:30 a.m.•27 views

Apache Neethi does not properly detect circular references in policy definitions.

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2026/05/01 9:30 a.m.•20 views

GHSA-2HFH-9H53-QC24 Apache Neethi does not properly detect circular references in policy definitions.

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/01 9:16 a.m.•19 views

CVE-2026-42403

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS0.008EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/01 8:38 a.m.•155 views

CVE-2026-42403

Apache Neethi (CVE-2026-42403) can fail to detect circular WS-Policy references during policy normalization, causing infinite recursion or an infinite loop that may lead to stack overflow or application hang. An attacker can craft policy documents with circular references, resulting in Denial of ...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/01 8:38 a.m.•13 views

CVE-2026-42403 Apache Neethi: Circular Policy Reference Infinite Loop

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/01 8:38 a.m.•20 views

EUVD-2026-26486

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/05/01 8:38 a.m.•25 views

CVE-2026-42403 Apache Neethi: Circular Policy Reference Infinite Loop

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.1AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/01 8:38 a.m.•16 views

CVE-2026-42403

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/01 12:00 a.m.•31 views

Apache Neethi 代码问题漏洞

Apache Neethi is a policy processing framework library developed by the Apache Foundation. Apache Neethi has code-related vulnerabilities; these vulnerabilities arise from the lack of restrictions on URIs when manually retrieving remote policy references via the PolicyReference API. This could le...

7.2CVSS7.5AI score0.00578EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•19 views

PT-2026-36395

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the lpvo usb driver within the GPIB subsystem. During the GPIB attach process, the driver iterates through registered USB interfaces and acquires references to US...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•27 views

PT-2026-36310

Name of the Vulnerable Software and Affected Versions Apache Neethi versions prior to 3.2.2 Description Apache Neethi fails to properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references for example, Policy A references Policy B, which ...

9.8CVSS6.3AI score0.008EPSS
SaveExploits2References85
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/01 12:00 a.m.•5 views

CVE-2026-42404: Server-Side Request Forgery (SSRF)

Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP...

7.2CVSS7.5AI score0.00578EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/01 12:00 a.m.•27 views

Apache Neethi 资源管理错误漏洞

Apache Neethi is a policy processing framework library developed by the Apache Foundation. There is a resource management vulnerability in Apache Neethi; this vulnerability stems from an improper detection of circular references in policy definitions. This can cause the policy normalization proce...

7.5CVSS7.5AI score0.008EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/01 12:00 a.m.•5 views

CVE-2026-42403: Uncontrolled Resource Consumption

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references where Policy A references Policy B which references Policy A, the policy normalization process can enter an infinite loop or cause excessive recursion,...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References4
Rows per page
Query Builder