NetApp Ontap Tools - for Vmware Vsphere 10

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

MongoDB Server may allow successful untrusted connection

Apache CXF SSRF Vulnerability using the Aegis databinding

Stack overflow in Protocol Buffers Java Lite

Apache Tomcat: Denial of Service

Openssh: regresshion - race condition in ssh allows rce/dos

netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

REXML ReDoS vulnerability

Certifi removes GLOBALTRUST root certificate

Apache HttpComponents: PSL (Public Suffix List) validation bypass

Apache HTTP Server: HTTP response splitting

Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

OCSP stapling bypass with GnuTLS

Apache HTTP Server: HTTP Response Splitting in multiple modules

Apache HTTP Server: source code disclosure with handlers configured via AddType

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader