Most recent entries from all

bdu:2023-05234

certfr-2024-avi-0040 — De multiples vulnérabilités ont été découvertes dans Atlassian Confluence et Jira. Certaines d'entre elles permettent à…

certfr-2024-avi-0040

Withdrawn: CLEANSTART-2026-FV79231 — Netty is a network application framework for development of protocol servers and clients

Withdrawn by the publisher.

Affected: CleanStart: s3proxy

Multiple security vulnerabilities affect the s3proxy package. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details.

EUVD-2026-196996

fkie_cve-2023-3635

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

GHSA-w33c-445m-f8w7 — Okio Signed to Unsigned Conversion Error vulnerability

Affected: Maven: com.squareup.okio:okio, Maven: com.squareup.okio:okio-jvm

gsd-2023-3635

jvndb-2026-010300

Hitachi Ops Center Viewpoint contain the following vulnerabilities: CVE-2014-3643, CVE-2023-3635, CVE-2023-6378, CVE-2023-6481, CVE-2023-35116, CVE-2024-12798, CVE-2024-12801, CVE-2024-47554

RHSA-2023:5165 — Red Hat Security Advisory: Red Hat AMQ Streams 2.5.0 release and security update

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way SnakeYaml: Constructor Deserialization Remote Code Execution netty: world readable temporary file containing sensitive data scala: deserialization gadget chain RESTEasy: creation of insecure temp files guava: insecure temporary directory creation okio: GzipSource class improper exception handling jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies bouncycastle: potential blind LDAP injection attack using a self-signed certificate snappy-java: Integer overflow in shuffle leads to DoS snappy-java: Integer overflow in compress leads to DoS snappy-java: Unchecked chunk length leads to DoS netty: SniHandler 16MB allocation leads to OOM

UBUNTU-CVE-2023-3635

Affected: Ubuntu:18.04:LTS: okio, Ubuntu:20.04:LTS: okio, Ubuntu:22.04:LTS: okio, Ubuntu:24.04:LTS: okio, Ubuntu:25.10: okio, Ubuntu:26.04:LTS: okio

WID-SEC-W-2023-2679 — Oracle Communications: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.