Poster - CVE CyberSecurity Database News (Page 314)

Jan 21, 2025 API Exploit SQL Java

CVE-2024-43709 - Exploiting Resource Allocation Limits in Elasticsearch with SQL Functions

--- Elasticsearch is one of the most used search and analytics engines in the world, powering everything from simple enterprise search to massive public web

Jan 21, 2025 Exploit SOAP Java Apache

CVE-2025-23184 - Denial of Service Vulnerability in Apache CXF – Code Snippet, Exploit Scenario, and Remediation

On February 2025, a security advisory (CVE-2025-23184) was published detailing a denial of service (DoS) vulnerability in Apache CXF versions before 3.5.10, 3.

Jan 21, 2025

CVE-2025-23086 - Tricking Users with Fake Origins in Brave Browser’s File Selector Dialog

A newly reported vulnerability — CVE-2025-23086 — has been found in Brave Browser for desktop (versions 1.70.x through 1.73.x). This bug lets malicious

Jan 21, 2025 API Exploit

CVE-2024-45091 - IBM UrbanCode Deploy Leaks Sensitive Data in Log Files — What You Need to Know

IBM UrbanCode Deploy (UCD) is a well-known tool for automating application deployments. But if you’re running certain versions, your sensitive data might be sitting

Jan 20, 2025 Exploit

CVE-2025-24014 - Silent Mode Vim Buffer Overflow – How a Hidden Bug Could Crash Your Editor

Vim is one of the most trusted and widely used text editors in the programming world. Its simplicity, speed, and power have earned it a