https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:26:02 +0000 https://cve.radiocsirt.org/vuln/cve-2025-59250 <p><strong>Affected:</strong> Microsoft JDBC Driver for SQL Server 10.2, Microsoft JDBC Driver for SQL Server 11.2, Microsoft JDBC Driver for SQL Server 12.10, Microsoft JDBC Driver for SQL Server 12.2, Microsoft JDBC Driver for SQL Server 12.4, Microsoft JDBC Driver for SQL Server 12.6, Microsoft JDBC Driver for SQL Server 12.8, Microsoft JDBC Driver for SQL Server 13.2</p> <p>Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>Affected:</strong> Microsoft JDBC Driver for SQL Server 10.2, Microsoft JDBC Driver for SQL Server 11.2, Microsoft JDBC Driver for SQL Server 12.10, Microsoft JDBC Driver for SQL Server 12.2, Microsoft JDBC Driver for SQL Server 12.4, Microsoft JDBC Driver for SQL Server 12.6, Microsoft JDBC Driver for SQL Server 12.8, Microsoft JDBC Driver for SQL Server 13.2</p> <p>Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.</p> https://cve.radiocsirt.org/vuln/cve-2025-59250 https://cve.radiocsirt.org/vuln/ghsa-3qp7-7mw8-wx86 <p><strong>Affected:</strong> Maven: io.netty:netty-handler</p> <p>### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions.</p> <p>### Details `io.netty.handler.ipfilter.IpSubnetFilterRule#compareTo(java.net.InetSocketAddress)` method performs a bitwise AND between the incoming IP address and the configured networkAddress, instead of the subnetMask.</p> <p>### Impact Access Control Bypass. Attacker can bypass IpSubnetFilter IPv6 access controls.</p> <p><strong>Affected:</strong> Maven: io.netty:netty-handler</p> <p>### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions.</p> <p>### Details `io.netty.handler.ipfilter.IpSubnetFilterRule#compareTo(java.net.InetSocketAddress)` method performs a bitwise AND between the incoming IP address and the configured networkAddress, instead of the subnetMask.</p> <p>### Impact Access Control Bypass. Attacker can bypass IpSubnetFilter IPv6 access controls.</p> https://cve.radiocsirt.org/vuln/ghsa-3qp7-7mw8-wx86