Lucene search
+L

9516 matches found

Tenable Nessus
Tenable Nessus
•added 2025/12/30 12:00 a.m.•8 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992416 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: mt6797-mt6351: Fix refcount leak in mt6797mt6351devprobe ofparsephandle returns a node...

5.5CVSS5.5AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/30 12:00 a.m.•7 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992483 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Init jump labels before parseearlyparam On 64-bit, calling jumplabelinit in...

5.5CVSS6AI score0.00249EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/30 12:00 a.m.•15 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992548 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: partitions: Fix refcount leak in parseredbootof ofgetchildbyname returns a node pointer with...

5.5CVSS5.6AI score0.00196EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/30 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-15284

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce...

6.3CVSS6.4AI score0.0045EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2025/12/29 11:15 p.m.•9 views

DEBIAN-CVE-2025-15284

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS6.3AI score0.0045EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/29 11:15 p.m.•14 views

CVE-2025-15284

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS0.0045EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2025/12/29 11:15 p.m.•16 views

CVE-2025-15284

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS6.5AI score0.0045EPSS
SaveExploits1References4
Mend
Mend
•added 2025/12/29 10:56 p.m.•3 views

CVE-2025-15284

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS6.3AI score0.0045EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/29 10:56 p.m.•15 views

CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS6.3AI score0.0045EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/29 10:56 p.m.•598 views

CVE-2025-15284

CVE-2025-15284 is a vulnerability in the qs library (parse modules) where the arrayLimit check does not apply to bracket notation (a[]=...) as in the vulnerable code path (lib/parse.js:159-162). The issue enables potential DoS via memory exhaustion by creating larger-than-expected arrays, though ...

6.3CVSS6.3AI score0.0045EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/12/29 10:56 p.m.•49 views

CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS0.0045EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/12/29 10:56 p.m.•10 views

CVE-2025-15284

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS6.3AI score0.0045EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•6 views

PT-2025-55507

Уязвимость функции parse option файла if-options.c DHCP-сервера dhcpcd связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

7.2CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•5 views

CVE-2025-15284: Improper Input Validation

Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...

6.3CVSS6.4AI score0.0045EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2025/12/25 12:56 a.m.•16 views

SUSE CVE-2023-54075

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parsedailinkinfo Add missing ofnodeputs before the returns to balance ofnodegets and ofnodeputs, which may get unbalanced in case the for loop 'foreachavailablechildofnode' returns ear...

5.6AI score0.00185EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/12/25 12:00 a.m.•57 views

RiteCMS Code Execution Vulnerability

RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a code execution vulnerability that stems from a flaw in the parsespecialtags function, which can be exploited by an attacker to cause remote code execution...

7.2CVSS6.5AI score0.00918EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•24 views

EUVD-2023-60334

In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchippinctrlparsegroups offindnodebyphandle returns a node pointer with refcount incremented, We should use ofnodeput on it when not needed anymore. Add missing ofnodeput to avoid refcou...

5.4AI score0.00219EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•20 views

EUVD-2023-60251

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parsedailinkinfo Add missing ofnodeputs before the returns to balance ofnodegets and ofnodeputs, which may get unbalanced in case the for loop 'foreachavailablechildofnode' returns ear...

5.6AI score0.00185EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/24 1:16 p.m.•22 views

CVE-2023-54075

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parsedailinkinfo Add missing ofnodeputs before the returns to balance ofnodegets and ofnodeputs, which may get unbalanced in case the for loop 'foreachavailablechildofnode' returns ear...

0.00185EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2025/12/24 1:16 p.m.•16 views

CVE-2023-54075

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parsedailinkinfo Add missing ofnodeputs before the returns to balance ofnodegets and ofnodeputs, which may get unbalanced in case the for loop 'foreachavailablechildofnode' returns ear...

5.6AI score0.00185EPSS
SaveExploits0References3
Rows per page
Query Builder