Lucene search
+L

297 matches found

Cvelist
Cvelist
added 2025/11/05 4:46 p.m.13 views

CVE-2025-46424

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service...

6.7CVSS0.0009EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/05 4:46 p.m.24 views

CVE-2025-46424

Dell CloudLink prior to 8.2 is affected by a cryptographic primitive with a risky implementation that can lead to Denial of Service when exploited by a high-privilege attacker. The issue is documented across multiple sources (Dell CloudLink; CNVD; RH; NVD; CVE listings) and consistently notes the...

6.7CVSS6.1AI score0.0009EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2025/10/21 6:04 p.m.3 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
added 2025/10/21 6:04 p.m.1 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
added 2025/10/21 6:04 p.m.2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
added 2025/10/21 6:04 p.m.2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
added 2025/10/21 6:04 p.m.2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
added 2025/10/21 6:04 p.m.7 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/16 6:30 p.m.11 views

EUVD-2025-34780

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

7.1CVSS7.4AI score0.0048EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/16 4:15 p.m.6 views

DEBIAN-CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS6.6AI score0.0048EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/16 4:15 p.m.7 views

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS6.3AI score
SaveExploits0References2
NVD
NVD
added 2025/10/16 4:15 p.m.12 views

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS0.0048EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/10/16 3:51 p.m.6 views

CVE-2025-62494 Type confusion in string addition in QuickJS

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

7.1CVSS7.5AI score0.0048EPSS
SaveExploits1References2
CVE
CVE
added 2025/10/16 3:51 p.m.224 views

CVE-2025-62494

Summary: CVE-2025-62494 is a type-confusion vulnerability in the QuickJS engine’s string concatenation path. During the + operation, if the left operand is a string, the code converts the right operand to a primitive via JS_ToPrimitiveFree, which can trigger callbacks (toString/valueOf). While th...

8.8CVSS7.6AI score0.0048EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2025/10/16 3:51 p.m.8 views

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS7.9AI score0.0048EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/10/16 3:51 p.m.16 views

CVE-2025-62494 Type confusion in string addition in QuickJS

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

7.1CVSS0.0048EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/10/16 12:00 a.m.7 views

PT-2025-42491

Name of the Vulnerable Software and Affected Versions QuickJS affected versions not specified Description A type confusion issue exists in the QuickJS engine related to how the string addition + operation is handled. The issue arises because an attacker can manipulate the type of the left-hand...

8.8CVSS7.5AI score0.0048EPSS
SaveExploits1References12
EUVD
EUVD
added 2025/10/14 6:30 p.m.11 views

EUVD-2025-34319

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

7.8CVSS8.8AI score0.00207EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/14 5:15 p.m.10 views

CVE-2025-58720

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

7.8CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.12 views

PT-2025-42058

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description A risky implementation within a cryptographic primitive used by Windows Cryptographic Services can allow a local attacker to disclose information. Recommendations At th...

7.8CVSS8.7AI score0.00207EPSS
SaveExploits0References3
Rows per page
Query Builder