Lucene search
+L

943 matches found

OSV
OSV
added 2025/02/25 3:0 p.m.7 views

UBUNTU-CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS7.1AI score0.00386EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/02/25 12:0 a.m.7 views

PT-2025-7899

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description A use-after-free flaw was found in the software. The issue occurs when changing an alarm, where the values of the change mask are evaluated one after the other. If one of the chang...

7.8CVSS6.8AI score0.00429EPSS
SaveExploits0References160
CNNVD
CNNVD
added 2025/02/13 12:0 a.m.16 views

Schneider Electric ASCO 5310 安全漏洞

The Schneider Electric ASCO 5310 is a single-channel remote alarm from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 that stems from the inclusion of an unrestricted or throttled resource allocation vulnerability that could cause communication to...

8.7CVSS6.6AI score0.00458EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in xwayland, xorg-server

A use-after-free flaw was identified in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, modifying the trigger values as required. Eventually, the SyncInitTrigger function is called. If one of these changes causes an error, the function...

7.8CVSS7AI score0.00386EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/08 4:30 a.m.11 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.7AI score0.00435EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/02/06 6:31 a.m.14 views

node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.6AI score0.00435EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/02/06 6:31 a.m.5 views

GHSA-GVWQ-6FMX-28XM node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

8.2CVSS6.6AI score0.00435EPSS
SaveExploits0References5
NVD
NVD
added 2025/02/05 10:15 p.m.14 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/05 12:0 a.m.17 views

PT-2025-5760 · Unknown · Node-Opcua-Alarm-Condition

Name of the Vulnerable Software and Affected Versions: node-opcua-alarm-condition version 2.134.0 Description: A prototype pollution in the fieldsToJson function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For node-opcua-alarm-condition...

8.2CVSS7.1AI score0.00435EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/02/05 12:0 a.m.17 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/05 12:0 a.m.8 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.4AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/05 12:0 a.m.68 views

CVE-2024-57086

CVE-2024-57086 affects node-opcua-alarm-condition (v2.134.0). The vulnerability is a prototype pollution in the fieldsToJson function, caused by a prototype contamination issue that can lead to a Denial of Service (DoS) when a crafted payload is supplied. Evidence from multiple sources confirms t...

7.5CVSS6.8AI score0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.8 views

PT-2025-36278

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0 Description A flaw exists in the Linux kernel related to tracing functionality. Specifically, insufficient bounds checking when handling strings longer than FTRACE BUFF MAX within the ftrace process regex...

7.1CVSS6.7AI score0.00179EPSS
SaveExploits0
NVD
NVD
added 2024/12/17 7:15 a.m.24 views

CVE-2021-26281

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

5.5CVSS0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/17 6:37 a.m.55 views

CVE-2021-26281

The CVE-2021-26281 entry relates to the vivo Alarm clock module, where some parameters are improperly stored, leaking sensitive information. The available documents identify the affected component as the alarm clock module and describe the root cause as improper storage of certain parameters, res...

5.5CVSS6.9AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/17 6:37 a.m.24 views

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

5.5CVSS0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/17 6:37 a.m.9 views

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

5.5CVSS7.1AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/17 12:0 a.m.8 views

vivo Alarm clock 安全漏洞

vivo Alarm clock is a cell phone alarm clock module from the Chinese company Vivo. A security vulnerability exists in vivo Alarm clock, which originates from improper storage of some parameters of the alarm clock module, leaking some sensitive information...

5.5CVSS6.7AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/12 1:36 a.m.58 views

CVE-2024-42407

CVE-2024-42407 affects Gallagher Command Centre Server: the Alarm Transmitter feature can cause insertion of sensitive information into log files, enabling an authenticated Operator to view restricted data. Affected versions are Command Centre Server 9.10 before 9.10.2149 (MR4), 9.00 before 9.00....

8.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.10 views

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from the insertion of sensitive information into a log file during the Alarm Sender...

8.5CVSS6.3AI score0.00316EPSS
SaveExploits0References1
Rows per page
Query Builder