Lucene search
+L

10806 matches found

osv_mini
osv_mini
•added 2025/12/06 3:52 p.m.•7 views

MINI-WH8J-JJPH-6QG4

Bulletin has no description...

6.5CVSS7AI score0.00284EPSS
SaveExploits0
osv_mini
osv_mini
•added 2025/12/06 3:52 p.m.•7 views

MINI-VPWM-392W-H8C2

Bulletin has no description...

6.5CVSS7AI score0.00284EPSS
SaveExploits0
NVD
NVD
•added 2025/12/05 6:15 p.m.•34 views

CVE-2025-34259

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicemap/building endpoint. When an authenticated user creates a map entry, the name parameter is stored and later rendered in the map list UI without HTML sanitzation. An...

5.4CVSS0.00259EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/12/05 6:12 p.m.•26 views

Envoy crashes when JWT authentication is configured with the remote JWKS fetching

Summary Envoy crashes when JWT authentication is configured with the remote JWKS fetching, allowmissingorfailed is enabled, multiple JWT tokens are present in the request headers and the JWKS fetch fails. Details This is caused by a re-entry bug in the JwksFetcherImpl. When the first token's JWKS...

6.5CVSS5.9AI score0.0053EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2025/12/05 5:16 p.m.•39 views

CVE-2025-34258

Advantech WISE-DeviceOn Server

5.4CVSS5.5AI score0.00213EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/12/05 5:16 p.m.•22 views

EUVD-2025-201436

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicemap/building endpoint. When an authenticated user creates a map entry, the name parameter is stored and later rendered in the map list UI without HTML sanitzation. An...

5.1CVSS5.5AI score0.00259EPSS
SaveExploits0References4
osv_mini
osv_mini
•added 2025/12/05 12:32 p.m.•9 views

MINI-59XJ-GH5G-RVXG

Bulletin has no description...

7.5CVSS6.3AI score0.00457EPSS
SaveExploits2
osv_mini
osv_mini
•added 2025/12/05 11:38 a.m.•4 views

MINI-5842-MV2C-RXRQ

Bulletin has no description...

7.5CVSS7.5AI score0.07757EPSS
SaveExploits0
osv_cga
osv_cga
•added 2025/12/05 9:36 a.m.•7 views

CGA-QWMM-2Q2J-68XF

Bulletin has no description...

7.5CVSS6.3AI score0.00457EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
•added 2025/12/05 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-40218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/vaddr: do not repeat pteoffsetmaplock until success DAMON's virtual address space operation set implementation vaddr calls pteoffsetmaplock inside the...

6.4AI score0.00187EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2025/12/04 9:31 p.m.•23 views

GHSA-4F99-4Q7P-P3GH Logrus is vulnerable to DoS when using Entry.Writer()

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

8.7CVSS7.2AI score0.0063EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/12/04 9:31 p.m.•15 views

EUVD-2025-201258

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.3AI score0.0063EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2025/12/04 9:31 p.m.•22 views

Logrus is vulnerable to DoS when using Entry.Writer()

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References11Affected Software1
osv_cga
osv_cga
•added 2025/12/04 7:57 p.m.•5 views

CGA-FQ8R-X5X3-CQF2

Bulletin has no description...

7.5CVSS6.3AI score0.00457EPSS
SaveExploits2References7
osv_azl
osv_azl
•added 2025/12/04 7:16 p.m.•29 views

AZL-71632 CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/12/04 7:16 p.m.•25 views

AZL-71537 CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-6

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/12/04 7:16 p.m.•20 views

AZL-71476 CVE-2025-65637 affecting package buildah 1.18.0-29

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/12/04 7:16 p.m.•22 views

AZL-71479 CVE-2025-65637 affecting package containernetworking-plugins 1.1.1-17

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/12/04 7:16 p.m.•27 views

AZL-71500 CVE-2025-65637 affecting package podman 4.1.1-26

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/12/04 7:16 p.m.•28 views

AZL-71516 CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
Rows per page
Query Builder