EUVD-2026-108742

In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet Too Big and Redirect Message packets are locally delivered and quote a UDP packet, an exception is only created in the IPv6 exception cache if the...

CVE-2026-99073

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de "inet: switch inetdumpfib to RCU protection" allowed IPv4 FIB dumps to run concurrently with nexthop replacement. fibdumpinfofnhe uses fibinfonumpath as the...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception...

UBUNTU-CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception...

Linux Distros Unpatched Vulnerability : CVE-2025-60496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of...

CVE-2025-60496

A Floating-Point Exception FPE in the reframersendpacket function...

CVE-2026-111181

A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the...

CVE-2026-112332

Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...

EUVD-2026-108344

Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...

DEBIAN-CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-85315

CVE-2026-85315 — camel-grpc: consumer exception disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where, when a route behind a gRPC consumer failed, the route exception's message was copied into the gRPC Status description. Unlike the status cause withCause...,...

CLEANSTART-2026-CU45491 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the rundeck package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

RHEL 9 : kernel (RHSA-2026:87805)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87805 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netlabel: Fix NULL pointer...

Uncaught Exception

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Uncaught Exception via verifyargs in vllm/samplingparams.py, which skips the mintokens = maxtokens validation when maxtokens is null on...

EUVD-2025-211140

A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120559

A Thrift client in Apache bRPC version 1.18.0, built with WITH THRIFT which is off by default can be crashed by the server peer it talks to. When the server returns a T EXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws...

CVE-2025-60496

A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2026-93256

A flaw was found in the Linux kernel. During the hibernation resume process on ARM64 systems, the kernel fails to properly mask processor exceptions before restoring the suspended system state. A local user could encounter or trigger an unhandled hardware exception while the system is in this...