org.graylog.plugins:usage-statistics (>=1.0.7, <=1.1.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.1.0)

org.graylog2:graylog2-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.7, =1.1.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-rc.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-rc.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0)

org.graylog2:graylog2-server MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.1)

org.graylog2:graylog2-server MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.2 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (2.1.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.3)

org.graylog2:graylog2-server MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.3 Source cves: unknown CVE Source advisory:...

Security update for libsoup2

This update for libsoup2 fixes the following issues: CVE-2025-2784: Fixed heap buffer over-read in skipinsignificantspace when sniffing conten bsc1240750 CVE-2025-32050: Fixed integer overflow in appendparamquoted bsc1240752 CVE-2025-32052: Fixed heap buffer overflow in sniffunknown bsc1240756...

python-werkzeug: user may execute code on a developer's machine

A flaw was found in Werkzeug, where an attacker may be able to execute code on a developer's machine under some circumstances. This issue requires the attacker to get the developer to interact with a domain and subdomain they control and enter the debugger PIN; if they are successful, it allows...

python-werkzeug: high resource usage when parsing multipart form data with many fields

A flaw was found in python-werkzeug. Werkzeug is multipart form data parser, that will parse an unlimited number of parts, including file parts. These parts can be a small amount of bytes, but each requires CPU time to parse, and may use more memory as Python data. If a request can be made to an...

Regular Expression Denial Of Service (ReDoS)

Transformers is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression processing due to a regex with exponential time complexity in the SubWordJapaneseTokenizer class, leading to excessive backtracking and high CPU usage...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from increased memory resource utilization...

PT-2025-20302

Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified Description The issue occurs when a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, and undisclosed responses can cause an increase in memory resource utilization. Recommendations At t...

Disable the Root User from Logging in to the System Using SSH

The PermitRootLogin parameter in the SSH configuration file /etc/ssh/sshdconfig specifies whether the root user can log in to the system using SSH. The root user is not allowed to log in to the system using SSH. System administrators must use their own user to log in to the system using SSH and r...

CVE-2025-47203: Improper Neutralization of Special Elements used in an OS Command

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...

Do Not Use auditctl to Set auditd Rules

auditd service rules can be configured using either rule files in the /etc/audit/rules.d/ directory applied after server restart or the auditctl command for immediate effect. The permission of the /etc/audit/rules.d/ directory is 750, while that of the auditctl command is 755. Therefore,...

Ensure That Partitions That Do Not Need to Be Mounted with Devices Are Mounted Using nodev

The nodev option specifies that the file system cannot contain device files. It is used to reduce the attack surface and improve security. If a directory is mounted with the nodev option, all device files, such as files of block devices and character devices in the directory, are parsed as common...