Lucene search
+L

948 matches found

CVE
CVE
added 2025/02/25 3:55 p.m.205 views

CVE-2025-26601

CVE-2025-26601 is a use-after-free in Xorg/Xwayland (SyncInitTrigger) when changing an alarm, potentially allowing use-after-free when the alarm triggers. Affected: xorg-x11-server-Xwayland (and related Xorg/Xwayland components). Remediation: apply the updated Xwayland/Xorg packages as described ...

7.8CVSS7.7AI score0.00386EPSS
SaveExploits0References19Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/25 3:55 p.m.13 views

CVE-2025-26601 Xorg: xwayland: use-after-free in syncinittrigger()

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS7.7AI score0.00386EPSS
SaveExploits0References17
OSV
OSV
added 2025/02/25 3:55 p.m.20 views

CVE-2025-26601 Xorg: xwayland: use-after-free in syncinittrigger()

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS7AI score
SaveExploits0References23
Debian CVE
Debian CVE
added 2025/02/25 3:55 p.m.11 views

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS7.5AI score0.00386EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/25 3:55 p.m.10 views

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS6.7AI score0.00386EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/25 3:00 p.m.7 views

UBUNTU-CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS7.1AI score0.00386EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/02/25 12:00 a.m.7 views

PT-2025-7899

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description A use-after-free flaw was found in the software. The issue occurs when changing an alarm, where the values of the change mask are evaluated one after the other. If one of the chang...

7.8CVSS6.8AI score0.00429EPSS
SaveExploits0References160
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.16 views

Schneider Electric ASCO 5310 安全漏洞

The Schneider Electric ASCO 5310 is a single-channel remote alarm from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 that stems from the inclusion of an unrestricted or throttled resource allocation vulnerability that could cause communication to...

8.7CVSS6.6AI score0.00458EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in xwayland, xorg-server

A use-after-free flaw was identified in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, modifying the trigger values as required. Eventually, the SyncInitTrigger function is called. If one of these changes causes an error, the function...

7.8CVSS7AI score0.00386EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/08 4:30 a.m.11 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.7AI score0.00435EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/06 6:31 a.m.5 views

GHSA-GVWQ-6FMX-28XM node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

8.2CVSS6.6AI score0.00435EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/02/06 6:31 a.m.15 views

node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.6AI score0.00435EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/02/05 10:15 p.m.14 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/05 12:00 a.m.17 views

PT-2025-5760 · Unknown · Node-Opcua-Alarm-Condition

Name of the Vulnerable Software and Affected Versions: node-opcua-alarm-condition version 2.134.0 Description: A prototype pollution in the fieldsToJson function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For node-opcua-alarm-condition...

8.2CVSS7.1AI score0.00435EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/02/05 12:00 a.m.17 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

0.00435EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/05 12:00 a.m.68 views

CVE-2024-57086

CVE-2024-57086 affects node-opcua-alarm-condition (v2.134.0). The vulnerability is a prototype pollution in the fieldsToJson function, caused by a prototype contamination issue that can lead to a Denial of Service (DoS) when a crafted payload is supplied. Evidence from multiple sources confirms t...

7.5CVSS6.8AI score0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/05 12:00 a.m.8 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.4AI score0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-36278

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0 Description A flaw exists in the Linux kernel related to tracing functionality. Specifically, insufficient bounds checking when handling strings longer than FTRACE BUFF MAX within the ftrace process regex...

7.1CVSS6.7AI score0.00179EPSS
SaveExploits0
NVD
NVD
added 2024/12/17 7:15 a.m.25 views

CVE-2021-26281

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

5.5CVSS0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/17 6:37 a.m.55 views

CVE-2021-26281

The CVE-2021-26281 entry relates to the vivo Alarm clock module, where some parameters are improperly stored, leaking sensitive information. The available documents identify the affected component as the alarm clock module and describe the root cause as improper storage of certain parameters, res...

5.5CVSS6.9AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder