277962 matches found
DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2025-55163 was introduced in 9.12.1, 9.12.2, 9.12.3, 9.12.4, 9.12.5, 9.12.6, 9.12.7, 9.12.8, 9.12.9, 9.12.10, 9.12.11, 9.12.12, 9.12.13, 9.12.14, 9.12.15, 9.12.16, 9.12.17, 9.12.18, 9.12.19, 9.12.22, 9.12.23, 9.12.24, 9.12.25,...
EUVD-2025-197616
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
HSEC-2023-0006 x509-validation does not enforce pathLenConstraint
x509-validation does not enforce pathLenConstraint x509-validation prior to version 1.4.8 did not enforce the pathLenConstraint value. Constrained CAs could accidentally or deliberately issue CAs below the maximum depth and x509-validation would accept certificates issued by the unauthorised...
HSEC-2023-0005 tls-extra: certificate validation does not check Basic Constraints
tls-extra: certificate validation does not check Basic Constraints tls-extra does not check the Basic Constraints extension of a certificate in certificate chain processing. Any certificate is treated as a CA certificate. As a consequence, anyone who has a valid certificate can use it to sign...
HSEC-2025-0004 Broken Path Sanitization in spacecookie Library
Broken Path Sanitization in spacecookie Library The spacecookie library exposes the functions sanitizePath and sanitizeIfNotUrl intended to remove .. components from paths which can be used to prevent path traversal attacks. Due to erroneous comparison code, this elimination is not actually...
HSEC-2025-0002 Double Public Key Signing Function Oracle Attack on Ed25519
Double Public Key Signing Function Oracle Attack on Ed25519 The standard specification of Ed25519 message signing involves providing the algorithm with a message and private key. The function will use the private key to compute the public key and sign the message. Some libraries provide a variant...
HSEC-2025-0003 Use after free in multithreaded lzma (.xz) decoder
Use after free in multithreaded lzma .xz decoder In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash CVE-2025-31115. The effects include heap use after free and writing to an address based on the null pointer plus ...
CVE-2025-8855
Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication Bypass, Manipulate Registry...
CVE-2025-8855 2FA Expiry Bypass in Optimus Software's Brokerage Automation
Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication Bypass, Manipulate Registry...
BELL-CVE-2025-40174
Bulletin has no description...
BELL-CVE-2025-40208
Bulletin has no description...
BELL-CVE-2025-40182
Bulletin has no description...
BELL-CVE-2025-40196
Bulletin has no description...
BELL-CVE-2025-40191
Bulletin has no description...
BELL-CVE-2025-40189
Bulletin has no description...
BELL-CVE-2025-40184
Bulletin has no description...
BELL-CVE-2025-40163
Bulletin has no description...
BELL-CVE-2025-40148
Bulletin has no description...