The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Buffer Overflow
Denial Of Service
Debian
Oracle
Canonical
+6
NVD
CVSS 2.0
9.0
EPSS
1.0%
Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2). Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Denial Of Service
Java
Red Hat
Jboss Operations Network
NVD
CVSS 2.0
9.0
EPSS
0.6%