Most recent entries from all

bdu:2021-00682

cnvd-2018-03242

EUVD-2026-322540

fkie_cve-2017-12626

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295).

GHSA-523c-xh4g-mh5m — Denial of Service in Apache POI

Affected: Maven: org.apache.poi:poi

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: - Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294) - Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295)

gsd-2017-12626

RHSA-2018:1322 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R7 security and bug fix update

karaf: LDAP injection in LDAPLoginModule undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) undertow: improper whitespace parsing leading to potential HTTP request smuggling poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception plexus-utils: Mishandled strings in Commandline class allow for command injection

UBUNTU-CVE-2017-12626

Affected: Ubuntu:16.04:LTS: libapache-poi-java, Ubuntu:18.04:LTS: libapache-poi-java

WID-SEC-W-2023-2946 — Oracle Fusion Middleware: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.