Lucene search
+L

183 matches found

BDU FSTEC
BDU FSTEC
added 2025/12/16 12:0 a.m.17 views

The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the keyboard driver for the ChromeOS embedded controller EC of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6AI score0.00188EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/12/08 12:0 a.m.8 views

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module, which supports the JFS file system in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module, which supports the JFS file system in Linux operating systems, is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.3AI score0.00255EPSS
SaveExploits0References23Affected Software2
Snyk
Snyk
added 2025/12/02 4:51 p.m.6 views

Insecure Default Initialization of Resource

Overview @modelcontextprotocol/sdk is a Model Context Protocol implementation for TypeScript Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the StreamableHTTPServerTransport or SSEServerTransport process when enableDnsRebindingProtection is not...

7.6CVSS6.8AI score0.00519EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.5 views

Siemens SIMATIC S7-1500 Missing Initialization of Resource (CVE-2021-22898)

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.8AI score0.04385EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/11/12 10:53 a.m.17 views

CVE-2025-40177 accel/qaic: Fix bootlog initialization ordering

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As soon as we queue MHI buffers to receive the bootlog from the device, we could be receiving data. Therefore all the resources needed to process that data need to be setup prior to...

0.00185EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/10/27 12:0 a.m.6 views

The vulnerability of the hns3 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to incorrect initialization of resources in the functions hclgeinitaedev and hclgecommcmduninit. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00222EPSS
SaveExploits0References8Affected Software7
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2006-2202

Malware in sbrugna...

4.3CVSS6.4AI score0.00413EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/04 9:30 a.m.8 views

EUVD-2025-32386

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...

6AI score0.00137EPSS
SaveExploits0References7
NVD
NVD
added 2025/10/04 8:15 a.m.8 views

CVE-2025-39934

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...

5.5CVSS0.00137EPSS
SaveExploits0References6
CVE
CVE
added 2025/10/04 7:30 a.m.31 views

CVE-2025-39934

CVE-2025-39934: Linux kernel drm: bridge: anx7625 fixes a NULL pointer dereference when an IRQ fires before resource initialization, potentially accessing uninitialized I2C tcpc_client data. The NVD entry notes a MEDIUM base score (5.5) with LOCAL attack vector and LOW PR, HIGH impact on availabi...

5.5CVSS6.1AI score0.00137EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2025/10/04 7:30 a.m.20 views

CVE-2025-39934 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...

0.00137EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-15904

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00278EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-14536

Malicious code in bioql PyPI...

6.8CVSS5.8AI score0.0017EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2025-31069

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00382EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-42844

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00153EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/10/02 12:0 a.m.9 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to insecure resource initialization, allows a perpetrator to disclose protected information.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the insecure initialization of resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

6.8CVSS5.7AI score0.00584EPSS
SaveExploits3References3Affected Software1
OSV
OSV
added 2025/09/24 9:30 p.m.6 views

GHSA-8V65-5FW5-23WJ node-cube vulnerable to prototype pollution

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

6.3CVSS7.6AI score0.00382EPSS
SaveExploits0References4
NVD
NVD
added 2025/09/24 7:15 p.m.12 views

CVE-2025-57348

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

6.5CVSS0.00382EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/24 12:0 a.m.17 views

CVE-2025-57348

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

0.00382EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/24 12:0 a.m.2 views

CVE-2025-57348

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

7.2AI score0.00382EPSS
SaveExploits0References2
Rows per page
Query Builder