Search CVE reports
111 – 120 of 37592 results
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
1 affected package
libspring-java
| Package | 24.04 LTS |
|---|---|
| libspring-java | Needs evaluation |
A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user. Affected...
1 affected package
libspring-java
| Package | 24.04 LTS |
|---|---|
| libspring-java | Needs evaluation |
IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules. Affected versions: Spring Framework 7.0.0...
1 affected package
libspring-java
| Package | 24.04 LTS |
|---|---|
| libspring-java | Needs evaluation |
Double-free When Checking OCSP Stapled Response
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 24.04 LTS |
|---|---|
| edk2 | Not affected |
| nodejs | Not affected |
| openssl | Not affected |
| openssl-fips | Not affected |
| openssl1.0 | Not in release |
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to...
1 affected package
apache2
| Package | 24.04 LTS |
|---|---|
| apache2 | Needs evaluation |
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
1 affected package
apache2
| Package | 24.04 LTS |
|---|---|
| apache2 | Needs evaluation |
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 24.04 LTS |
|---|---|
| edk2 | Not affected |
| nodejs | Not affected |
| openssl | Not affected |
| openssl-fips | Not affected |
| openssl1.0 | Not in release |
Some fixes available 1 of 2
CMS AuthEnvelopedData Processing May Accept Forged Messages
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 24.04 LTS |
|---|---|
| edk2 | Needs evaluation |
| nodejs | Not affected |
| openssl | Fixed |
| openssl-fips | Not in release |
| openssl1.0 | Not in release |
PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 24.04 LTS |
|---|---|
| edk2 | Not affected |
| nodejs | Not affected |
| openssl | Not affected |
| openssl-fips | Not affected |
| openssl1.0 | Not in release |
Some fixes available 1 of 2
Heap Buffer Over-read in ASN.1 Content Parsing
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 24.04 LTS |
|---|---|
| edk2 | Needs evaluation |
| nodejs | Not affected |
| openssl | Fixed |
| openssl-fips | Not in release |
| openssl1.0 | Not in release |