All CVEs — page 388 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows unauthenticated attackers to forge authenticated SOAP messages by exploiting a vulnerability in the DOM security processor of Apache WSS4J, leading to potential unauthorized access and manipulation of sensitive data.
The flaw allows a remote attacker to manipulate XPath expressions, potentially bypassing required signatures or encryption on SOAP messages, leading to unauthorized access or data exposure.
Apache WSS4J accepts attacker-controlled derived-key lengths and offsets without proper bounds checking, potentially leading to weak cryptographic keys or excessive resource consumption when processing crafted WS-Security messages.
This flaw in CRI-O's sandbox state persistence allows attackers to overwrite reserved sandbox bookkeeping, potentially leading to container escape and exposure of host-side resources.
The CODESYS Gateway Client suffers from excessive memory allocation due to missing size limits on gateway responses, allowing unauthenticated attackers to cause denial-of-service through memory exhaustion.