Lucene search
+L

23627 matches found

Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.10 views

PT-2025-37162

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 28.0.3 Erlang OTP versions 26.2.5.15 through 27.3.4.3 Erlang OTP versions 27.3.4.3 Erlang OTP versions 28.0.3 ssh versions 3.0.1 through 5.3.3 ssh versions 5.1.4.12 ssh versions 5.2.11.3 Description An Allocati...

7.1CVSS6.5AI score0.00385EPSS
SaveExploits0References67
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.7 views

Erlang/OTP 安全漏洞

Erlang/OTP is an Erlang/OTP open source library written in JavaScript that handles handling exceptions. The library catches exceptions raised by the node.js built-in API. A security vulnerability exists in Erlang/OTP versions 17.0 through 28.0.3, 27.3.4.3, and 26.2.5.15, which stems from an...

7.1CVSS6.3AI score0.00385EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.8 views

PT-2025-51604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an issue where the udp tunnel nic register function incorrectly used netdev WARN for non-critical error reporting. netdev WARN includes a backtrace, which is...

6CVSS5.2AI score0.00202EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.6 views

PT-2025-37246

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The skcipher walk functions lacked necessary error checks after memory allocation, potentially leading to issues if allocation failed. This could impact the crypto subsystem on x86/aeg...

5.5CVSS6.3AI score0.00134EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.15 views

PT-2025-37206

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the drm/msm module. The msm ioctl gem info set metadata function lacked error handling for krealloc failures, potentially leading to a NULL pointe...

5.5CVSS5.9AI score0.00155EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a file descriptor table allocation that may exceed the INTMAX limit, potentially resulting in a memory allocatio...

5.5CVSS6AI score0.00177EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.8 views

Erlang/OTP 安全漏洞

Erlang/OTP is an Erlang/OTP open source library written in JavaScript that handles handling exceptions. The library catches exceptions raised by the node.js built-in API. A security vulnerability exists in Erlang/OTP versions 17.0 through 28.0.3, 27.3.4.3, and 26.2.5.15, which stems from an...

5.3CVSS6.3AI score0.00385EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.7 views

PT-2025-37223

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.8 Description: A flaw exists in the Linux kernel's ALSA timer functionality. Specifically, within the snd utimer create function, a potential issue arises if the kasprintf function returns NULL. This can le...

6.3AI score0.00154EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.9 views

Erlang/OTP 安全漏洞

Erlang/OTP is an Erlang/OTP open source library written in JavaScript that handles handling exceptions. The library catches exceptions raised by the node.js built-in API. A security vulnerability exists in Erlang/OTP versions 17.0 through 28.0.3 and versions 27.3.4.3 and 26.2.5.15, which stems fr...

5.3CVSS6.3AI score0.00385EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.11 views

PT-2025-37163

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 28.0.3 Erlang OTP versions 26.2.5.15 through 27.3.4.3 Erlang OTP versions 27.3.4.3 Erlang OTP versions 28.0.3 ssh versions 3.0.1 through 5.3.3 ssh versions 5.1.4.12 ssh versions 5.2.11.3 Description An Allocati...

7.1CVSS6.5AI score0.00431EPSS
SaveExploits0References70
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.12 views

PT-2025-37165

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 28.0.3 Erlang OTP versions 26.2.5.15 Erlang OTP versions 27.3.4.3 Description An Allocation of Resources Without Limits or Throttling issue exists in the Erlang OTP ssh ssh sftp modules, potentially leading to...

7.1CVSS6.6AI score0.00385EPSS
SaveExploits0References47
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of error checking and could lead to memory allocation failures...

5.5CVSS6.1AI score0.00134EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/09/10 5:59 p.m.3 views

Memory Allocation with Excessive Size Value

Overview isc.org/stork/backend/server/restservice is an open source ISC project providing a monitoring application and dashboard for ISC Kea DHCP and eventually ISC BIND 9. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the http.Handler functio...

8.7CVSS7AI score0.0044EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/10 3:42 p.m.3 views

Allocation of Resources Without Limits or Throttling

Overview org.webjars.bowergithub.axios:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the data: URL handler. An attacker can trigger a denial of service by crafting a...

7.5CVSS6.3AI score0.0114EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/10 3:42 p.m.5 views

Allocation of Resources Without Limits or Throttling

Overview org.webjars.bower:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the data: URL handler. An attacker can trigger a denial of service by crafting a data: URL with...

7.5CVSS6.3AI score0.0114EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/09/10 12:37 p.m.18 views

CVE-2025-10225 Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)

Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 in the OpenSSL-based session module in AxxonSoft Axxon One C-Werk 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering...

8.7CVSS0.00399EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-10790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AP4CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service application crash, related to a memory...

7.5CVSS7.2AI score0.01527EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-31609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is...

7.8CVSS7.3AI score0.0022EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-7698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation...

6.5CVSS6.4AI score0.0121EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.17 views

PT-2025-46621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s blk-mq subsystem related to memory allocation. Specifically, allocating and freeing sched tags while a queue is frozen can lead to a deadlock. The iss...

7.1CVSS5.5AI score0.006EPSS
SaveExploits1References404
Rows per page
Query Builder