Category: Advisories

Post Content Read More

A buffer overflow was discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of...

In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an incorrect URI...

IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web...

FEDORA-2022-de968d1b6c Packages in this update: rubygem-puma-4.3.6-5.fc35 Update description: Fix CVE-2022-23634 - information leak between requests. Fix CVE-2022-24790 - http request smuggling vulnerabilities Read More

FEDORA-2022-52d0032596 Packages in this update: rubygem-puma-5.5.2-3.fc36 Update description: Fix CVE-2022-23634 - information leak between requests. Fix CVE-2022-24790 - http request smuggling vulnerabilities. Read More

FEDORA-2022-7c8b29195f Packages in this update: rubygem-puma-5.6.5-1.fc37 Update description: Update to Puma 5.6.5. Read More

FEDORA-2022-7bc0f14a13 Packages in this update: rubygem-puma-5.6.5-1.fc38 Update description: Automatic update for rubygem-puma-5.6.5-1.fc38. Changelog * Thu Aug 25 2022 Vít Ondruch <vondruch@redhat.com> - 5.6.5-1 - Update...

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can...

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because...