The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Denial Of Service
Buffer Overflow
Mysql Enterprise Monitor
Curl
Libcurl
+2
NVD
CVSS 2.0
9.0
EPSS
1.0%
Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2). Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Red Hat
Denial Of Service
Java
Authentication Bypass
Jboss Operations Network
NVD
CVSS 2.0
9.0
EPSS
0.6%