Lucene search
+L

5994 matches found

NVD
NVD
•added 2025/06/15 3:15 p.m.•25 views

CVE-2025-22854

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions...

6.9CVSS0.00337EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/15 3:00 p.m.•70 views

CVE-2025-22854

CVE-2025-22854 affects the PingFederate Google Adapter. The vulnerability stems from improper handling of non-200 HTTP responses, which can lead to thread exhaustion under normal usage. Affected software/component: PingFederate Google Adapter (Ping Identity). Impact stated: potential denial of se...

6.9CVSS5.8AI score0.00337EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/15 3:00 p.m.•58 views

CVE-2025-22854 Possible thread exhaustion from processing http responses in PingFederate Google Adapter

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions...

6.9CVSS0.00337EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/15 3:00 p.m.•12 views

CVE-2025-22854 Possible thread exhaustion from processing http responses in PingFederate Google Adapter

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions...

6.9CVSS5.8AI score0.00337EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/15 12:00 a.m.•10 views

CVE-2025-22854: Unexpected Status Code or Return Value

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions...

6.9CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/15 12:00 a.m.•27 views

PT-2025-25499 · Ping Identity · Pingfederate Google Adapter

Name of the Vulnerable Software and Affected Versions: PingFederate Google Adapter affected versions not specified Description: The issue is related to the improper handling of non-200 HTTP responses in the PingFederate Google Adapter, which can lead to thread exhaustion under normal usage...

6.9CVSS6.1AI score0.00337EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/06/15 12:00 a.m.•18 views

Ping Identity PingFederate security vulnerabilities

Ping Identity PingFederate is a flagship software-based federation server from US-based Ping Identity, Inc. for identity management. A security vulnerability exists in Ping Identity PingFederate that stems from mishandling of non-200 HTTP responses, which could lead to thread exhaustion...

6.9CVSS5.8AI score0.00337EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2025/06/13 11:08 a.m.•20 views

OESA-2025-1631 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: Perl threads have a working directory ra...

5.9CVSS6.8AI score0.00499EPSS
SaveExploits0References2
Amazon
Amazon
•added 2025/06/12 12:00 a.m.•15 views

Medium: perl

Issue Overview: Thread creation while a directory handle is open does a fchdir, affecting other threads race condition CVE-2025-40909 Affected Packages: perl Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

5.9CVSS6.9AI score0.00499EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/06/11 9:02 a.m.•18 views

CVE-2025-5869

A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0. Affected is the function sysrecvfrom of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument from leads to memory corruption...

9.8CVSS7.2AI score0.00819EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/11 8:21 a.m.•16 views

CVE-2025-5868

A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function systhreadsigprocmask of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument how leads to improper validation of array index...

9.8CVSS7.1AI score0.01078EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/11 8:21 a.m.•16 views

CVE-2025-5867

A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csyssendto of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument to leads to null pointer dereference...

9.8CVSS7AI score0.01109EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/11 7:20 a.m.•29 views

CVE-2025-5866

A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function syssigprocmask of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument how leads to improper validation of array index...

9.8CVSS7.1AI score0.00826EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/11 7:20 a.m.•20 views

CVE-2025-5865

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sysselect of the file rt-thread/components/lwp/lwpsyscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor...

9.8CVSS7AI score0.00878EPSS
SaveExploits1References1
Fedora
Fedora
•added 2025/06/11 2:46 a.m.•23 views

[SECURITY] Fedora 42 Update: dtk6log-0.0.2-7.fc42

Simple, convenient and thread safe logger for Qt-based C++ apps...

8.4CVSS6.5AI score0.00383EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2025/06/10 8:46 p.m.•39 views

K000151779: Node.js vulnerabilities CVE-2025-23083 and CVE-2025-23085

Security Advisory Description CVE-2025-23083 With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be...

7.7CVSS6.1AI score0.01377EPSS
SaveExploits0
Amazon
Amazon
•added 2025/06/10 12:00 a.m.•17 views

Important: perl

Issue Overview: Thread creation while a directory handle is open does a fchdir, affecting other threads race condition CVE-2025-40909 Affected Packages: perl Issue Correction: Run dnf update perl --releasever 2023.7.20250609 to update your system. New Packages: aarch64: ...

5.9CVSS7.2AI score0.00499EPSS
SaveExploits0
NVD
NVD
•added 2025/06/09 9:15 a.m.•26 views

CVE-2025-5869

A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0. Affected is the function sysrecvfrom of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument from leads to memory corruption...

9.8CVSS0.00819EPSS
SaveExploits1References4
CVE
CVE
•added 2025/06/09 8:31 a.m.•84 views

CVE-2025-5869

CVE-2025-5869 affects RT-Thread 5.1.0. The vulnerability is in the function sys_recvfrom (rt-thread/components/lwp/lwp_syscall.c) where manipulation of the from argument leads to memory corruption. Several sources corroborate the impact as memory corruption with a critical severity, including mul...

9.8CVSS7.2AI score0.00819EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2025/06/09 8:31 a.m.•16 views

CVE-2025-5869 RT-Thread lwp_syscall.c sys_recvfrom memory corruption

A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0. Affected is the function sysrecvfrom of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument from leads to memory corruption...

8.6CVSS6.9AI score
SaveExploits0References6
Rows per page
Query Builder