Lucene search
K

813 matches found

vulnersOsv
vulnersOsv
added 2025/08/14 6:52 p.m.7 views

change-object (=0.0.0), cli-qa (=2.0.0) +7 more potentially affected by unknown CVE via run-serially (=0.0.0)

run-serially NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object =0.0.0 - cli-qa =2.0.0 - comma-list =0.0.0 - fd-select =1.0.0 - frp-tick =1.0.0 - innkeeper =1.0.4 - limited-parallel-loop...

5.8AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-25373 Malicious code in limited-parallel-loop (npm)

The package limited-parallel-loop was found to contain malicious code...

7.2AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/08/14 12:0 a.m.2 views

Searching for Privacy Risks in LLM Agents Via Simulation

The widespread deployment of LLM-based agents is likely to introduce a critical privacy threat: malicious agents that proactively engage others in multi-turn interactions to extract sensitive information. These dynamic dialogues enable adaptive attack strategies that can cause severe privacy...

6.9AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/08/14 12:0 a.m.1 views

Enhancing GraphQL Security by Detecting Malicious Queries Using Large Language Models, Sentence Transformers, and Convolutional Neural Networks

GraphQL's flexibility, while beneficial for efficient data fetching, introduces unique security vulnerabilities that traditional API security mechanisms often fail to address. Malicious GraphQL queries can exploit the language's dynamic nature, leading to denial-of-service attacks, data...

7.2AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/08/12 4:58 p.m.3 views

CVE-2025-20627

Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.4AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2025/08/10 11:42 p.m.3 views

BIT-GOLANG-2025-47907 Incorrect results returned from Rows.Scan in database/sql

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

7CVSS7AI score0.00073EPSS
Exploits0References6
Veracode
Veracode
added 2025/08/10 7:4 p.m.3 views

Race Condition Vulnerability

Library name is vulnerable to race condition. The vulnerability is due to query cancellation during the Scan method execution, which allows an attacker to interfere with parallel queries and cause unexpected results or errors...

7CVSS7AI score0.00073EPSS
Exploits0References8Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/09 3:26 p.m.4 views

CVE-2025-47907

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6.4AI score0.00073EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2025/08/07 11:22 p.m.2 views

SUSE CVE-2025-47907

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

5.7CVSS6.8AI score0.00073EPSS
Exploits0References18
OSV
OSV
added 2025/08/07 4:15 p.m.1 views

DEBIAN-CVE-2025-47907

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

7CVSS6.5AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2025/08/07 4:15 p.m.4 views

AZL-66138 CVE-2025-47907 affecting package golang for versions less than 1.22.7-5

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

7CVSS6.8AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2025/08/07 4:15 p.m.2 views

AZL-66153 CVE-2025-47907 affecting package golang for versions less than 1.24.6-1

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

7CVSS6.8AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2025/08/07 4:15 p.m.0 views

UBUNTU-CVE-2025-47907

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

7CVSS6.7AI score0.00073EPSS
Exploits0References10
OSV
OSV
added 2025/08/07 3:7 p.m.2 views

GO-2025-3849 Incorrect results returned from Rows.Scan in database/sql

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

7CVSS6AI score0.00073EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/07 12:0 a.m.1 views

Google Golang 安全漏洞

Google Golang is a static strongly typed, compiled language from Google.Go's syntax is close to that of C, but differs with respect to variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages that...

7CVSS6AI score0.00073EPSS
Exploits0References5
OSV
OSV
added 2025/07/29 12:43 p.m.2 views

USN-7654-5 linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

9.8CVSS6.4AI score0.00126EPSS
Exploits0References140
OSV
OSV
added 2025/07/24 8:1 a.m.2 views

USN-7651-5 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

7.8CVSS6.6AI score0.00065EPSS
Exploits0References118
Snyk
Snyk
added 2025/07/23 8:3 p.m.2 views

Infinite loop

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS6.9AI score0.00156EPSS
Exploits1References2
OSV
OSV
added 2025/07/22 1:27 p.m.2 views

USN-7651-4 linux-gcp, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

7.8CVSS6.6AI score0.00065EPSS
Exploits0References118
OSV
OSV
added 2025/07/18 10:6 a.m.2 views

USN-7651-2 linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

7.8CVSS6.7AI score0.00065EPSS
Exploits0References118
Rows per page
Query Builder