11488 matches found
MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
Description On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket Authentication.validateFingerPrint. That validation calls hash on the...
GHSA-CX2F-J9FH-8G68 MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
Description On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket Authentication.validateFingerPrint. That validation calls hash on the...
Uncaught Exception
Overview music-metadata is a Music metadata parser for Node.js, supporting virtual any audio and tag format. Affected versions of this package are vulnerable to Uncaught Exception via the DSF parser DsfParser when processing a malformed DSF file whose chunk header declares a size smaller than the...
Security Bulletin: This Power System update is being released to address CVE-2026-17426
Summary The BMC's HTTPS service allows unauthenticated attackers to crash the BMC's HTTPS service, resulting in denial of service. Vulnerability Details CVEID:CVE-2026-17426 DESCRIPTION: OPENBMC could allow a remote attacker to cause a denial of service due to an unhandled exception. CWE:CWE-248:...
CVE-2025-31161
CVE-2025-31161 Warning: This tool is for authorized security testing and educational purposes only. Unauthorized use against systems you do not have explicit permission to test is illegal. Overview This tool is a proof-of-concept PoC for CVE-2025-31161 , a critical authentication bypass...
GHSA-4X9P-G9WM-8Q7F Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Summary Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettingsincludecontent=False to exclude message content — user prompts, model completions, tool call arguments and responses, and any other message content — from exported telemetry, so that agents can be monitored withou...
libhangul: Improper exception handling leads to vulnerabilities
The libhangul library has a vulnerability in its exception handling. This vulnerability arises from the lack of validation for values adjacent to entries in the Hanja dictionary file during parsing. Malicious dictionary files can cause the application to crash unexpectedly, resulting in a...
CLEANSTART-2026-IJ91953 GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer
Security vulnerability affects the apache-hive package. GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer...
CLEANSTART-2026-AY49632 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason
Security vulnerability affects the apache-nifi-registry package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...
CLSA-2026-1791399419 espeak-ng: Fix of CVE-2023-49994
CVE-2023-49994: fix floating point exception in wavegen - Guard pcaudiolib-devel BuildRequires with %ifnarch i686 not available for i686 in the almalinux9.2esu devel repo - Add ruby-default-gems BuildRequires so ronn can activate rubygem-rexml 3.3.3, whose gemspec depends on the strscan default...
SUSE CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
SUSE CVE-2026-106122
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...
RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
Summary When property-file/Map-based ConnectionFactory setup fails while parsing the uri key, the library wraps the underlying exception with the raw connection string — including the plaintext username and password — baked verbatim into the new exception's message. Details...
GHSA-H6W7-QMCM-Q6XR RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
Summary When property-file/Map-based ConnectionFactory setup fails while parsing the uri key, the library wraps the underlying exception with the raw connection string — including the plaintext username and password — baked verbatim into the new exception's message. Details...
PT-2026-111249
Уязвимость операционной системы Cisco NX-OS связана с обработкой исключительных состояний. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на доступность защищаемой информации...
Linux Distros Unpatched Vulnerability : CVE-2026-106122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortst...
AlmaLinux 9.2 [TuxCare] Security Update: espeak-ng / espeak-ng-devel / espeak-ng-doc / espeak-ng-vim (ALMALINUX9.2:CLSA-2026:1791399419)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791399419 advisory. - Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c. CVE-2023-49994 Note...
CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-102413 Uncaught Exception in Elastic Endpoint Leading to Denial of Service
Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations including Chinese, Japanese, and Korean locales on Windows, an unhandle...
CVE-2026-102413
The Elastic Defend component within Elastic Agent / Endpoint is vulnerable to a Denial of Service (DoS) due to an Uncaught Exception (CWE-248) . When processing a specially crafted file name on Windows hosts using specific system locales (such as Chinese, Japanese, or Korean ), an unhandled excep...