Lucene search
+L

1100 matches found

RedhatCVE
RedhatCVE
•added 2025/02/25 3:55 p.m.•15 views

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS6.7AI score0.00393EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2025/02/25 3:00 p.m.•14 views

UBUNTU-CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS7.1AI score0.00393EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•3 views

CVE-2025-26601: Use After Free

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS6AI score0.00393EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2025/02/25 12:00 a.m.•13 views

PT-2025-7899

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description A use-after-free flaw was found in the software. The issue occurs when changing an alarm, where the values of the change mask are evaluated one after the other. If one of the chang...

7.8CVSS6.8AI score0.00438EPSS
SaveExploits0References160
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•23 views

Schneider Electric ASCO 5310 安全漏洞

The Schneider Electric ASCO 5310 is a single-channel remote alarm from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 that stems from the inclusion of an unrestricted or throttled resource allocation vulnerability that could cause communication to...

8.7CVSS6.6AI score0.00467EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•5 views

Astra Linux – Vulnerability in xwayland, xorg-server

A use-after-free flaw was identified in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, modifying the trigger values as required. Eventually, the SyncInitTrigger function is called. If one of these changes causes an error, the function...

7.8CVSS7.5AI score0.00393EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/08 4:30 a.m.•19 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.7AI score0.00443EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/02/06 6:31 a.m.•7 views

@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +14 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)

node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 and more Source cves: CVE-2024-57086 Source advisory:...

7.5CVSS5.3AI score0.00443EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2025/02/06 6:31 a.m.•10 views

GHSA-GVWQ-6FMX-28XM node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

8.2CVSS6.6AI score0.00443EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/02/06 6:31 a.m.•24 views

node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.6AI score0.00443EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/02/05 10:15 p.m.•22 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS0.00443EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/05 12:00 a.m.•84 views

CVE-2024-57086

The node-opcua-alarm-condition package (version v2.134.0 ) contains a prototype pollution vulnerability within the fieldsToJson function. An attacker can exploit this flaw by supplying a crafted payload to trigger a Denial of Service (DoS) . This vulnerability is transitive across several other p...

7.5CVSS6.8AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/05 12:00 a.m.•4 views

CVE-2024-57086: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS5.7AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/05 12:00 a.m.•11 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.4AI score0.00443EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/05 12:00 a.m.•26 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

0.00443EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/05 12:00 a.m.•25 views

PT-2025-5760 · Unknown · Node-Opcua-Alarm-Condition

Name of the Vulnerable Software and Affected Versions: node-opcua-alarm-condition version 2.134.0 Description: A prototype pollution in the fieldsToJson function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For node-opcua-alarm-condition...

8.2CVSS7.1AI score0.00443EPSS
SaveExploits0References8
Mend
Mend
•added 2025/02/05 12:00 a.m.•3 views

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

8.7CVSS0.00443EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2025-36278

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0 Description A flaw exists in the Linux kernel related to tracing functionality. Specifically, insufficient bounds checking when handling strings longer than FTRACE BUFF MAX within the ftrace process regex...

7.8CVSS6.7AI score0.00184EPSS
SaveExploits0
NVD
NVD
•added 2024/12/17 7:15 a.m.•36 views

CVE-2021-26281

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

5.5CVSS0.00176EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/17 6:37 a.m.•36 views

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

5.5CVSS0.00176EPSS
SaveExploits0References1
Rows per page
Query Builder