Lucene search
+L

8078 matches found

RedhatCVE
RedhatCVE
added 2025/07/06 10:21 p.m.16 views

CVE-2025-53365

A flaw was found in MCP. The mcp Python SDK exhibits an uncaught exception when a client intentionally triggers an error following the establishment of a streamable HTTP session. This condition allows a remote attacker to cause a program crash. The vulnerability stems from a lack of exception...

8.7CVSS6.3AI score0.0035EPSS
SaveExploits0References6
OSV
OSV
added 2025/07/04 10:06 p.m.17 views

GHSA-3QHF-M339-9G5V MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank y...

8.7CVSS5.8AI score0.06789EPSS
SaveExploits0References9
Veracode
Veracode
added 2025/07/04 5:58 a.m.7 views

Improper Authorization

n8n is vulnerable to improper authorization. The vulnerability is due to insufficient access control in the /rest/executions/:id/stop endpoint, which allows an attacker to stop workflow executions they do not own or have access to, potentially causing business disruption...

4.9CVSS6.2AI score0.00288EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:00 a.m.18 views

The vulnerability of the `static_key_fast_inc_not_disabled()` function in the `net/ipv4/tcp_ao.c` component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the statickeyfastincnotdisabled function in the net/ipv4/tcpao.c component of the Linux kernel relates to the disclosure of information. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.7AI score0.00189EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:00 a.m.9 views

The vulnerability of the Linux operating system’s kernel, related to excessive interleaving, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to excessive intermingling of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.0024EPSS
SaveExploits0References14Affected Software4
CNVD
CNVD
added 2025/07/04 12:00 a.m.14 views

Denial of Service Vulnerability in Multiple Advantech Products (CNVD-2026-13233)

Advantech WISE-4060LAN is an industrial automation controller from Advantech, Taiwan, China. A denial of service vulnerability exists in multiple Advantech products, which can be exploited by attackers to cause a remote denial of service and system unavailability...

6.5CVSS5.8AI score0.00215EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/04 12:00 a.m.9 views

Open5GS Denial of Service Vulnerability (CNVD-2025-18571)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial-of-service vulnerability exists in Open5GS, which can be exploited by attackers to cause service disruption...

4.8CVSS6.8AI score0.00189EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:00 a.m.9 views

The vulnerability of the OAM service of the Nokia Single RAN network management platform allows a attacker to cause a service failure.

The vulnerability of the OAM service of the Nokia Single RAN network management platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.3CVSS5.8AI score0.00168EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:00 a.m.14 views

The vulnerability of Nokia’s Single RAN network management platform lies in the improper validation of certain types of input data, allowing attackers to trigger service interruptions.

The vulnerability of the Nokia Single RAN network management platform is related to the improper validation of certain types of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

2CVSS5.5AI score0.00462EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:00 a.m.16 views

The vulnerability of the net/mlx5 component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the net/mlx5 component in the Linux operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00327EPSS
SaveExploits0References14Affected Software4
CNNVD
CNNVD
added 2025/07/04 12:00 a.m.10 views

Model Context Protocol Python SDK 安全漏洞

Model Context Protocol Python SDK is a Model Context Protocol open source development tool for Model Context Protocol servers and clients. A security vulnerability exists in the Model Context Protocol Python SDK prior to version 1.9.4, which stems from an unhandled exception when handling malform...

8.7CVSS6.4AI score0.06789EPSS
SaveExploits0References4
OSV
OSV
added 2025/07/03 8:08 p.m.10 views

CVE-2025-52554 n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential...

4.9CVSS6.5AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/07/03 2:06 p.m.16 views

n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

Summary Denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. Impact This is a Denial of Service DoS vulnerability that allows authenticated attackers to cause service unavailability through malformed filesystem URI...

4.9CVSS6.8AI score0.00398EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/07/03 1:15 p.m.16 views

CVE-2025-49595

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. This allows authenticated attackers to cause service unavailability through malformed...

4.9CVSS0.00398EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/07/03 12:16 p.m.24 views

CVE-2025-49595 n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. This allows authenticated attackers to cause service unavailability through malformed...

4.9CVSS0.00398EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/03 12:00 a.m.11 views

n8n 安全漏洞

n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in n8n versions prior to 1.99.1, which stems from an authorization vulnerability in the /rest/executions/:id/stop endpoint that could lead to a business interruption...

4.9CVSS6.3AI score0.00288EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:00 a.m.12 views

The vulnerability in the driver/net/ethernet/marvell/octeontx2/nic/otx2_dmac_flt.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the driver/net/ethernet/marvell/octeontx2/nic/otx2dmacflt.c component of the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00241EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:00 a.m.12 views

Vulnerability of the ath12k_mac_op_set_bitrate_mask() function in the Linux kernel’s drivers/net/wireless/ath/ath12k/mac.c file, allowing a hacker to cause a service failure

The vulnerability of the ath12kmacopsetbitratemask function in the drivers/net/wireless/ath/ath12k/mac.c file of the Linux kernel is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7AI score0.00216EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:00 a.m.13 views

The vulnerability in the driver/gpu/drm/xe/xe_exec.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/gpu/drm/xe/xeexec.c kernel module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00186EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:00 a.m.14 views

The vulnerability of the drm/xe component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drm/xe component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00225EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder