asf__karaf_CVE-2022-22932_4-3-5

Apache Karaf Apache Karaf es un runtime modulith que soporta varios frameworks y modelos de programación REST/API, web, spring boot, .... Proporciona funcionalidades llave en mano que puedes aprovechar directamente sin esfuerzo, empaquetadas como aplicación mutable o inmutable. Descripción genera...

CVE-2026-10648: NULL Pointer Dereference

mcumgrserialprocessfrag in subsys/mgmt/mcumgr/transport/src/serialutil.c calls netbufreset on the result of smppacketalloc before checking it for NULL. smppacketalloc uses netbufallocKNOWAIT against the shared MCUmgr packet pool CONFIGMCUMGRTRANSPORTNETBUFCOUNT, default 4, which returns NULL when...

PT-2018-10821

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 3.0.9 Apache Karaf versions prior to 4.0.9 Apache Karaf versions prior to 4.1.1 Description The issue affects the webconsole feature in Apache Karaf, specifically the Gogo shell/console. When the Pax Web Extender...

Endian Firewall Stored From XSS to Remote Command Execution

Vulnerability Summary The following advisory describes a stored cross site scripting that can be used to trigger remote code execution in Endian Firewall version 5.0.3. Endian Firewall is a “turnkey Linux security distribution, which is an independent, unified security management operating system...