Lucene search
+L

232 matches found

osv_cve
osv_cve
•added 2026/01/07 5:33 p.m.•32 views

CVE-2025-66560 Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write

Quarkus is a Cloud Native, Linux Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a vulnerability exists in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously writt...

5.9CVSS5.8AI score0.00383EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/07 5:33 p.m.•28 views

EUVD-2026-1178

Quarkus is a Cloud Native, Linux Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a vulnerability exists in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously writt...

5.9CVSS5.8AI score0.00383EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/07 5:33 p.m.•16 views

CVE-2025-66560 Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write

Quarkus is a Cloud Native, Linux Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a vulnerability exists in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously writt...

5.9CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Mend
Mend
•added 2026/01/07 5:33 p.m.•6 views

CVE-2025-66560

Quarkus is a Cloud Native, Linux Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a vulnerability exists in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously writt...

8.2CVSS5.8AI score0.00383EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•7 views

CVE-2025-66560: Allocation of Resources Without Limits or Throttling

Quarkus is a Cloud Native, Linux Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a vulnerability exists in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously writt...

7.5CVSS5.8AI score0.00383EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/12 8:15 p.m.•18 views

CVE-2025-36934

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.4AI score0.00097EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/11 9:31 p.m.•24 views

EUVD-2025-202844

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.4AI score0.00097EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/11 8:15 p.m.•23 views

CVE-2025-36934

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4CVSS0.00097EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/11 7:35 p.m.•55 views

CVE-2025-36934

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00097EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/11 7:35 p.m.•84 views

CVE-2025-36934

CVE-2025-36934 is a use-after-free vulnerability within the bigo_worker_thread of private/google-modules/video/gchips/bigo.c. This flaw is caused by a race condition and can lead to local escalation of privilege without requiring additional execution privileges or user interaction. It is reported...

7.4CVSS6.4AI score0.00097EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/11 7:35 p.m.•7 views

CVE-2025-36934

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.4AI score0.00097EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•28 views

PT-2025-50714

Name of the Vulnerable Software and Affected Versions Google Bigo affected versions not specified Description The issue is a use after free condition occurring in the bigo worker thread of private/google-modules/video/gchips/bigo.c due to a race condition. This could lead to local escalation of...

7.4CVSS6.3AI score0.00097EPSS
SaveExploits0References12
osv_pub
osv_pub
•added 2025/12/01 12:00 a.m.•28 views

PUB-A-427204614

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4CVSS6.3AI score0.00097EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2010-4588

Malware in sbrugna...

4CVSS5.8AI score0.01104EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-0691

Malicious code in bioql PyPI...

7.5CVSS6.8AI score0.02852EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-3111

Malicious code in bioql PyPI...

7.7CVSS7.5AI score0.00422EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/19 12:00 a.m.•20 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that the brcmfbtcoexinfo worker thread may be rescheduled after being canceled, leading to...

7.8CVSS7.2AI score0.00162EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/09/16 5:15 p.m.•16 views

UBUNTU-CVE-2023-53326

In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL ptregs powerpc sets up PFKTHREAD and PFIOWORKER with a NULL ptregs, which from my arguably very short checking is not commonly done for other archs. This is fine, except when...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/09/03 12:00 a.m.•17 views

CVE-2025-52494

Adacore Ada Web Server AWS before 25.2 is vulnerable to a denial-of-service DoS condition due to improper handling of SSL handshakes during connection initialization. When a client initiates an HTTPS connection, the server performs the SSL handshake before assigning the connection to a processing...

5.8AI score0.00355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2019-9821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. Thi...

8.1CVSS8.1AI score0.00846EPSS
SaveExploits0References2
Rows per page
Query Builder