CVE-2023-3906

Improper Validation of Specified Type of Input in GitLab

An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Gitlab

Products

Gitlab

CVE-2023-3904

Improper Validation of Specified Type of Input in GitLab

An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible to overflow the time spent on an issue that altered the details shown in the issue boards.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Gitlab

Products

Gitlab

CVE-2023-3900

Improper Validation of Specified Type of Input in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. An invalid 'start_sha' value on merge requests page may lead to Denial of Service as Changes tab would not load.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Gitlab

Products

Gitlab

CVE-2024-5696

Mozilla: Memory Corruption in Text Fragments

By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Debian Mozilla Redhat

Products

Debian Linux Firefox Thunderbird and 5 more

CVE-2025-36092

IBM Business Automation Insights improper input validation

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm

Products

Cloud Pak For Business Automation

CVE-2023-38709

Apache HTTP Server: HTTP response splitting

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

CVSS 3.1 · 7.3 High EPSS 3.9% KEV · Not listed

Vendors

Apache Apple Broadcom and 4 more

Products

Http Server Macos Fabric Operating System and 6 more

CVE-2024-29038

tpm2 does not detect if quote was not generated by TPM

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat Tpm2-tools Project

Products

Enterprise Linux Tpm2-tools

CVE-2023-43665

python-django: Denial-of-service possibility in django.utils.text.Truncator

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Djangoproject Fedoraproject Redhat

Products

Django Fedora Ansible Automation Platform and 3 more

CVE-2023-41164

python-django: Potential denial of service vulnerability in ``django.utils.encoding.uri_to_iri()``

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Djangoproject Fedoraproject Redhat

Products

Django Fedora Ansible Automation Platform and 3 more

CVE-2022-31629

$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

CVSS 3.1 · 6.5 Medium EPSS 49.6% KEV · Not listed

Vendors

Debian Fedoraproject Php and 1 more

Products

Debian Linux Fedora Php and 1 more

CVE-2024-42416

Multiple issues in ctl(4) CAM Target Layer

The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process. A malicious iSCSI initiator could achieve remote code execution on the iSCSI target host.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Freebsd

Products

Freebsd

CVE-2024-41991

python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Djangoproject Redhat

Products

Django Ansible Automation Platform Discovery and 3 more

CVE-2024-39614

python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant()

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.

CVSS 3.1 · 7.5 High EPSS 28.6% KEV · Not listed

Vendors

Djangoproject Redhat

Products

Django Ansible Automation Platform Openstack and 3 more

CVE-2024-38875

python-django: Potential denial-of-service in django.utils.html.urlize()

An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Djangoproject Redhat

Products

Django Ansible Automation Platform Openstack and 2 more

CVE-2024-31948

frr: bgpd daemon crash

In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Frrouting

Products

Frrouting

CVE-2022-26128

frrouting: Heap buffer overflow in function babel_packet_examin in babeld/message.c

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Frrouting

Products

Frrouting

CVE-2022-26127

frrouting: Heap buffer overflow in frr/babeld/message.c

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed

Vendors

Frrouting

Products

Frrouting

CVE-2022-26125

frrouting: overflow bugs in unpack_tlv_router_cap

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed

Vendors

Frrouting Redhat

Products

Frrouting Enterprise Linux

CVE-2022-24754

Buffer overflow in pjsip

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials (credentials with data_type `PJSIP_CRED_DATA_DIGEST`). This issue has been patched in the master branch of the PJSIP repository and will be included with the next release. Users unable to upgrade need to check that the hashed digest data length must be equal to `PJSIP_MD5STRLEN` before passing to PJSIP.

CVSS 3.1 · 8.5 High EPSS 2.1% KEV · Not listed

Vendors

Debian Teluu

Products

Debian Linux Pjsip

CVE-2024-8925

Erroneous parsing of multipart form data

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially leading to erroneous application behavior.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux