Lucene search
+L

12057 matches found

Microsoft CVE
Microsoft CVE
•added 2025/09/04 4:10 a.m.•11 views

drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing

...

5.5CVSS7AI score0.00237EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/03 10:32 p.m.•19 views

drm/amd/display: Skip Recompute DSC Params if no Stream on Link

...

7AI score0.00017EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/03 9:45 p.m.•21 views

drm/amd/display: Check stream_status before it is used

...

5.5CVSS7AI score0.00206EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2016-1866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in- the-middle attackers to execute arbitrary code by...

8.1CVSS8.2AI score0.01516EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/09/02 5:21 p.m.•575 views

Exploit for CVE-2025-9784

CVE-2025-9784 MadeYouReset HTTP/2 Vulnerability Test Overv...

7.5CVSS6.9AI score0.02325EPSS
SaveExploits1
Snyk
Snyk
•added 2025/09/02 3:31 p.m.•12 views

Allocation of Resources Without Limits or Throttling (MadeYouReset)

Overview io.undertow:undertow-core is a Java web server based on non-blocking IO. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling MadeYouReset through malformed client requests that trigger repeated server-side stream resets without...

8.7CVSS6.7AI score0.02325EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2025/09/02 2:15 p.m.•8 views

DEBIAN-CVE-2025-9784

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

7.5CVSS5.2AI score0.02325EPSS
SaveExploits1References1
Mend
Mend
•added 2025/09/02 1:37 p.m.•7 views

CVE-2025-9784

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

8.7CVSS0.02325EPSS
SaveExploits1References40
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•4 views

CVE-2025-9784: Allocation of Resources Without Limits or Throttling

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

7.5CVSS7.1AI score0.02325EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/08/31 6:46 a.m.•14 views

CVE-2025-58058

A memory leak flaw has been discovered in the golang github.com/ulikunitz/xz package. In affected versions, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the curren...

5.3CVSS6.9AI score0.00433EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-55197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requir...

8.7CVSS7AI score0.00477EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2025-8671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may...

7.5CVSS6.4AI score0.03621EPSS
SaveExploits3References3
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•16 views

CVE-2025-30038

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream ADS for all files downloaded from potentially untrusted sources...

7.3CVSS7.2AI score0.00169EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2018-6794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends...

5.3CVSS6.2AI score0.23687EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2021-40826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207...

7.8CVSS7.7AI score0.01292EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2025-20109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable...

7.8CVSS7AI score0.00141EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2018-1000178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessageconst QByteArray &msg datastreampeer.cpp...

9.8CVSS7.2AI score0.04054EPSS
SaveExploits1References2
CloudLinux
CloudLinux
•added 2025/08/29 4:13 p.m.•36 views

php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

9.8CVSS7AI score0.00856EPSS
SaveExploits1
osv_clsa
osv_clsa
•added 2025/08/29 4:13 p.m.•23 views

CLSA-2025-1756483990 php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

9.8CVSS6.4AI score0.00856EPSS
SaveExploits1References1
osv_clsa
osv_clsa
•added 2025/08/29 4:08 p.m.•22 views

CLSA-2025-1756483693 php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

9.8CVSS6.4AI score0.00856EPSS
SaveExploits1References1
Rows per page
Query Builder