VMware Spring Foundation 安全漏洞

VMware Spring Foundation is an application development framework provided by the American company VMware, which offers enterprise-level infrastructure support for application development. There are security vulnerabilities in VMware Spring Foundation versions 7.0.5 and earlier, 6.2.16 and earlier...

Duende IdentityServer 安全漏洞

Duende IdentityServer is a Duende open source, standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core. A security vulnerability exists in Duende IdentityServer that stems from certain functions that incorrectly treat maliciously constructed URLs as local and trusted. An...

CVE-2024-32664

CVE-2024-32664 affects Suricata before 7.0.5 and 6.0.19, where specially crafted traffic or datasets can cause a limited buffer overflow. The vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include avoiding rules with the base64_decode keyword (bytes option 1, 2, or 5) and, for 7.0.x, set...