Lucene search
K

11 matches found

Circl
Circl
•added 2026/05/18 12:34 p.m.•11 views

CVE-2026-42651

creationtimestamp| type| source ---|---|--- 2026-05-18 12:34:28+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4v5mze4o24...

6.3CVSS5.8AI score0.00242EPSS
Exploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/31 12:33 a.m.•14 views

CVE-2024-42651

NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component subCtxhandle. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SUBSCRIBE message...

7.5CVSS7.5AI score0.004EPSS
Exploits1References1
NVD
NVD
•added 2025/07/29 7:15 p.m.•5 views

CVE-2024-42651

NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component subCtxhandle. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SUBSCRIBE message...

7.5CVSS0.004EPSS
Exploits1References3
Vulnrichment
Vulnrichment
•added 2025/07/29 12:0 a.m.•5 views

CVE-2024-42651

NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component subCtxhandle. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SUBSCRIBE message...

7.1AI score0.004EPSS
Exploits1References3
CVE
CVE
•added 2025/07/29 12:0 a.m.•21 views

CVE-2024-42651

CVE-2024-42651 affects NanoMQ v0.17.9 with a heap use-after-free in the sub_Ctx_handle component that can cause a Denial of Service when processing a crafted SUBSCRIBE message. Root cause is use-after-free in heap management. The available documents do not provide a confirmed fix or patched versi...

7.5CVSS6.9AI score0.004EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/07/29 12:0 a.m.•10 views

CVE-2024-42651

NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component subCtxhandle. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SUBSCRIBE message...

0.004EPSS
Exploits1References3
Circl
Circl
•added 2023/11/01 1:22 p.m.•4 views

CVE-2023-42651

creationtimestamp| type| source ---|---|--- 2023-11-01 13:22:06+00:00| seen| https://t.me/cibsecurity/73322...

5.5CVSS5.5AI score0.0008EPSS
Exploits0References1
OSV
OSV
•added 2023/11/01 10:15 a.m.•4 views

CVE-2023-42651

In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5CVSS5.9AI score0.0008EPSS
Exploits0References1
NVD
NVD
•added 2023/11/01 10:15 a.m.•11 views

CVE-2023-42651

In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5CVSS5.3AI score0.0008EPSS
Exploits0References1
CVE
CVE
•added 2023/11/01 9:8 a.m.•59 views

CVE-2023-42651

Technical details about CVE-2023-42651 are not publicly provided in the connected documents. The available sources reiterate a local information disclosure in engineermode without additional execution privileges, but do not specify affected products, versions, exploitability, or fixes. Monitor fo...

5.5CVSS5.2AI score0.0008EPSS
Exploits0References1Affected Software1
CVE
CVE
•added 2022/05/11 2:11 p.m.•67 views

CVE-2021-42651

CVE-2021-42651 describes a Server Side Template Injection (SSTI) in the open-source toolkit Pentest-Collaboration-Framework v1.0.8 . The vulnerability allows an authenticated remote attacker to execute arbitrary code via the path “/project/PROJECTNAME/reports/”. Root cause is SSTI in the server-s...

8.8CVSS8.9AI score0.01505EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder