Lucene search
K

19 matches found

Patchstack
Patchstack
added 2026/05/11 2:50 p.m.5 views

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components discovered by ? in WordPress Npm react-server-dom-parcel versions = 19.0.0, 19.0.6...

7.5CVSS5.8AI score0.00338EPSS
Exploits1References5Affected Software1
Patchstack
Patchstack
added 2026/05/11 2:50 p.m.12 views

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components discovered by ? in WordPress Npm react-server-dom-webpack versions = 19.0.0, 19.0.6...

7.5CVSS5.8AI score0.00338EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2026/04/08 8:16 p.m.2 views

CVE-2026-23869

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4. The vulnerability is triggered ...

7.5CVSS0.00841EPSS
Exploits3References1
GithubExploit
GithubExploit
added 2025/12/05 12:16 p.m.125 views

Exploit for CVE-2025-55182

I. Overview of the Vulnerability In recent days, there have b...

10CVSS7.1AI score0.82011EPSS
Exploits358
GithubExploit
GithubExploit
added 2025/12/04 3:28 a.m.151 views

Exploit for CVE-2025-55182

CVE-2025-55182: React Server Components RCE A minimal proof o...

10CVSS8.3AI score0.82011EPSS
Exploits372
Github Security Blog
Github Security Blog
added 2025/12/03 7:7 p.m.12 views

React Server Components are Vulnerable to RCE

Impact There is an unauthenticated remote code execution vulnerability in React Server Components. We recommend upgrading immediately. The vulnerability is present in versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 of: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Patche...

10CVSS7.8AI score0.82011EPSS
Exploits358References13Affected Software3
CVE
CVE
added 2025/12/03 3:40 p.m.1063 views

CVE-2025-55182

CVE-2025-55182 is a pre-auth remote code execution vulnerability in React Server Components (versions 19.0.0, 19.1.0, 19.1.1, 19.2.0) affecting react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The issue arises from unsafe deserialization of payloads in HTTP reque...

10CVSS7.8AI score0.82011EPSS
In wildExploits358References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.1 views

PT-2024-31447 · Akamai · Akamai Sia Threatavert +1

Name of the Vulnerable Software and Affected Versions: Akamai SIA Secure Internet Access Enterprise ThreatAvert versions prior to 19.2.0 Akamai SIA Secure Internet Access Enterprise Apps Portal versions prior to 19.2.0.3 Akamai SIA Secure Internet Access Enterprise Apps Portal versions prior to...

7.1CVSS6.7AI score0.00167EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/02/06 12:0 a.m.2 views

Dell Data Protection Search Security Vulnerability

Dell Data Protection Search is a search tool in the Data Protection suite from Dell USA. A security vulnerability exists in Dell Data Protection Search version 19.2.0 and later versions that originates from exposing passwords in plain text...

9.8CVSS6.8AI score0.00224EPSS
Exploits0References2
CVE
CVE
added 2024/02/01 3:57 p.m.31 views

CVE-2024-22433

Dell Data Protection Search 19.2.0 and above exposes passwords in plain text via LdapSettings.get_ldap_info, enabling a remote unauthenticated attacker to potentially compromise confidentiality, integrity, and availability and take remote control of DP Search as described in CVE-2024-22433. Affec...

9.8CVSS9.4AI score0.00224EPSS
Exploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/21 6:20 p.m.2 views

Malicious code in renxt-host-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 944749dfc81b2b67c674e603d951d85dc31ffec7e6049640c5b3674624ef62e0 The OpenSSF Package Analysis project identified 'renxt-host-service' @ 19.2.0 npm as malicious. It is considered malicious because: - The packag...

7.1AI score
Exploits0
OSV
OSV
added 2023/07/21 6:20 p.m.5 views

MAL-2023-1284 Malicious code in renxt-host-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 944749dfc81b2b67c674e603d951d85dc31ffec7e6049640c5b3674624ef62e0 The OpenSSF Package Analysis project identified 'renxt-host-service' @ 19.2.0 npm as malicious. It is considered malicious because: - The packag...

7.3AI score
Exploits0
OpenVAS
OpenVAS
added 2023/02/27 12:0 a.m.14 views

Node.js 16.x < 16.19.1, 18.x < 18.14.1, 19.x < 19.2.0 DoS Vulnerability - Windows

Node.js is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js";...

7.5CVSS7.2AI score0.00319EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/02/16 12:0 a.m.4 views

PT-2023-2002 · Node.Js +9 · Node.Js +9

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 19.2.0 Node.js versions prior to 18.14.1 Node.js versions prior to 16.19.1 Node.js versions prior to 14.21.3 Description: A cryptographic issue exists that may not clear the OpenSSL error stack after certain...

9.8CVSS6.1AI score0.91789EPSS
Exploits7References137
OSV
OSV
added 2019/10/16 6:15 p.m.2 views

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

7.7CVSS7.1AI score0.00351EPSS
Exploits0References1
Prion
Prion
added 2019/10/16 6:15 p.m.14 views

Buffer overflow

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

4CVSS7.3AI score0.00351EPSS
Exploits0References1Affected Software1
Symantec
Symantec
added 2019/10/15 12:0 a.m.28 views

Oracle GraalVM Enterprise Edition CVE-2019-2986 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocol. The 'LLVM Interpreter' component is affected. This vulnerability affects the following supported versions: 19.2.0 Technologies Affected Orac...

1AI score0.00351EPSS
Exploits0References1Affected Software1
vulnersOsv
vulnersOsv
added 2019/06/10 6:5 p.m.3 views

billots (=0.1.1), bitdust (=0.0.2) +43 more potentially affected by CVE-2019-12387 via twisted (>=16.0.0 <=19.2.0)

twisted PYPI version =16.0.0, =0.1.0, =18.4.0, =3.1.0, =0.14.2, =0.0.3, =2019.5.0, =1.0.0, =1.4.3, =0.1.0, =0.3.4, =4.0.0, =4.0.0rc1 and more Source cves: CVE-2019-12387 Source advisory: OSV:GHSA-6CC5-2VG4-CC7M...

6.1CVSS6.8AI score0.01819EPSS
Exploits1
CNVD
CNVD
added 2015/11/04 12:0 a.m.1 views

Cisco ASR 5500 SAE Gateway Denial of Service Vulnerability

Cisco ASR 5500 System Architecture Evolution SAE Gateway is a Cisco ASR 5000 series mobile multimedia service solution gateway product from Cisco. A security vulnerability exists in the border gateway protocol input packet handler for the Cisco ASR 5500 SAE Gateway device versions 19.1.0.61559 an...

5CVSS6.9AI score0.00474EPSS
Exploits0References1
Rows per page
Query Builder