Most recent entries from all

bdu:2025-03306

certfr-2024-avi-1081 — De multiples vulnérabilités ont été découvertes dans les produits IBM.Certaines d'entre elles permettent à un attaquant…

certfr-2024-avi-1081

Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4

Withdrawn by the publisher.

Affected: CleanStart: stargate

Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...

EUVD-2026-212956

fkie_cve-2024-47554

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

GHSA-78wr-2p64-hpwj — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Affected: Maven: commons-io:commons-io

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The `org.apache.commons.io.input.XmlStreamReader` class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

jvndb-2026-010300

Hitachi Ops Center Viewpoint contain the following vulnerabilities: CVE-2014-3643, CVE-2023-3635, CVE-2023-6378, CVE-2023-6481, CVE-2023-35116, CVE-2024-12798, CVE-2024-12801, CVE-2024-47554

msrc_CVE-2024-47554 — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

msrc_CVE-2024-47554

NCSC-2026-0027 — Kwetsbaarheden verholpen in Oracle Fusion Middleware

NCSC-2026-0027

OESA-2024-2558 — apache-commons-io security update

Affected: openEuler:24.03-LTS: apache-commons-io

Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Security Fix(es): Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.(CVE-2024-47554)

openSUSE-SU-2024:14387-1 — apache-commons-io-2.17.0-2.1 on GA media

apache-commons-io-2.17.0-2.1 on GA media

RHSA-2024:8823 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) nimbus-jose-jwt: large JWE p2c header value causes Denial of Service wildfly: No timeout for EAP management interface may lead to Denial of Service (DoS) keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

SUSE-SU-2024:3596-1 — Security update for apache-commons-io

Security update for apache-commons-io

UBUNTU-CVE-2024-47554

Affected: Ubuntu:Pro:14.04:LTS: commons-io, Ubuntu:Pro:16.04:LTS: commons-io, Ubuntu:Pro:18.04:LTS: commons-io, Ubuntu:Pro:20.04:LTS: commons-io, Ubuntu:Pro:22.04:LTS: commons-io, Ubuntu:Pro:24.04:LTS: commons-io

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

WID-SEC-W-2024-3082 — Apache Commons IO: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons IO ausnutzen, um einen Denial of Service Angriff durchzuführen.