Latest vulnerabilities for "adacore ada web services"

Where

Sort:

Versions

2.10.0

2.10.1

AdaCore ada_web_servicesAn issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges a…

Risk 43

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString() function in the src/core/aws-utils.adb module.

First published (updated )

CVE-2024-41708

AdaCore Ada Web ServicesInput Validation

Risk 26

Severity

Input Validation

AV:N/AC:L/Au:N/C:N/I:N/A:P

AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

First published (updated )

CVE-2012-1035

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.