Lucene search
+L

11 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-23166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/05/19 2:15 a.m.•27 views

UBUNTU-CVE-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits0References4
Mend
Mend
•added 2025/05/19 1:25 a.m.•10 views

CVE-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

8.7CVSS7.5AI score0.00817EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•17 views

Node.js security vulnerabilities

Node.js is an open source, cross-platform JavaScript runtime environment open-sourced by Node.js. A security vulnerability exists in Node.js that stems from an incorrect call to ThrowException by the SignTraits::DeriveBits method in a background thread, which could lead to a process crash...

7.5CVSS7.4AI score0.00817EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•6 views

CVE-2025-23166: Uncaught Exception

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

7.5CVSS7.6AI score0.00817EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/05/13 12:00 a.m.•21 views

GraphicsMagick Heap Use-After-Free Information Disclosure

The vulnerability of the ThrowException function in the GraphicsMagick graphics editor is related to the use of objects after they are released from memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its...

9.8CVSS7.7AI score0.02371EPSS
SaveExploits1References10Affected Software3
OSS-Fuzz
OSS-Fuzz
•added 2020/02/29 3:58 a.m.•30 views

imagemagick:encoder_tiff_fuzzer: Segv on unknown address in ThrowException

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5633619379093504 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash...

6.8AI score
SaveExploits0Affected Software1
Prion
Prion
•added 2019/12/24 1:15 a.m.•33 views

Design/Logic Flaw

In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c...

7.5CVSS9.3AI score0.02371EPSS
SaveExploits1References6Affected Software4
osv_ubuntu
osv_ubuntu
•added 2019/12/24 1:15 a.m.•21 views

UBUNTU-CVE-2019-19950

In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c...

9.8CVSS7.3AI score0.02371EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/24 12:00 a.m.•6 views

CVE-2019-19950: Use After Free

In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c...

9.8CVSS8.3AI score0.02371EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2017/11/08 2:52 p.m.•31 views

libreoffice/scrtffuzzer: Bad-cast to cppuhelper::detail::XExceptionThrower from cppuhelper::detail::XExceptionThrower in cppu::throwException

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5060976341680128 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Cras...

6.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder