Lucene search
+L

9313 matches found

BDU FSTEC
BDU FSTEC
•added 2025/07/07 12:00 a.m.•27 views

The vulnerability of the EMC Platform component of the Oracle Hospitality Simphony sales management system allows a hacker to gain access to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the EMC Platform for Point of Sale Management system, Oracle Hospitality Simphony, involves the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a malicious actor to gain access to the ability to modify, add, or delete data, or...

8CVSS7.2AI score0.00608EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/07/06 10:21 p.m.•29 views

CVE-2025-53365

A flaw was found in MCP. The mcp Python SDK exhibits an uncaught exception when a client intentionally triggers an error following the establishment of a streamable HTTP session. This condition allows a remote attacker to cause a program crash. The vulnerability stems from a lack of exception...

8.7CVSS6.3AI score0.00419EPSS
SaveExploits0References6
OSV
OSV
•added 2025/07/04 10:06 p.m.•26 views

GHSA-3QHF-M339-9G5V MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank y...

8.7CVSS5.8AI score0.09309EPSS
SaveExploits0References9
Veracode
Veracode
•added 2025/07/04 5:58 a.m.•19 views

Improper Authorization

n8n is vulnerable to improper authorization. The vulnerability is due to insufficient access control in the /rest/executions/:id/stop endpoint, which allows an attacker to stop workflow executions they do not own or have access to, potentially causing business disruption...

4.9CVSS6.2AI score0.00367EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2025/07/04 12:00 a.m.•14 views

Open5GS Denial of Service Vulnerability (CNVD-2025-18571)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial-of-service vulnerability exists in Open5GS, which can be exploited by attackers to cause service disruption...

4.8CVSS6.8AI score0.00231EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/04 12:00 a.m.•24 views

Denial of Service Vulnerability in Multiple Advantech Products (CNVD-2026-13233)

Advantech WISE-4060LAN is an industrial automation controller from Advantech, Taiwan, China. A denial of service vulnerability exists in multiple Advantech products, which can be exploited by attackers to cause a remote denial of service and system unavailability...

6.5CVSS5.8AI score0.00244EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/04 12:00 a.m.•20 views

Model Context Protocol Python SDK 安全漏洞

Model Context Protocol Python SDK is a Model Context Protocol open source development tool for Model Context Protocol servers and clients. A security vulnerability exists in the Model Context Protocol Python SDK prior to version 1.9.4, which stems from an unhandled exception when handling malform...

8.7CVSS6.4AI score0.09309EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/07/04 12:00 a.m.•17 views

The vulnerability of the OAM service of the Nokia Single RAN network management platform allows a attacker to cause a service failure.

The vulnerability of the OAM service of the Nokia Single RAN network management platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.3CVSS5.8AI score0.00197EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/04 12:00 a.m.•23 views

The vulnerability of the net/mlx5 component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the net/mlx5 component in the Linux operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00327EPSS
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/07/04 12:00 a.m.•24 views

The vulnerability of Nokia’s Single RAN network management platform lies in the improper validation of certain types of input data, allowing attackers to trigger service interruptions.

The vulnerability of the Nokia Single RAN network management platform is related to the improper validation of certain types of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

2CVSS5.5AI score0.00542EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/04 12:00 a.m.•22 views

The vulnerability of the `static_key_fast_inc_not_disabled()` function in the `net/ipv4/tcp_ao.c` component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the statickeyfastincnotdisabled function in the net/ipv4/tcpao.c component of the Linux kernel relates to the disclosure of information. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.7AI score0.00189EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/07/04 12:00 a.m.•12 views

The vulnerability of the Linux operating system’s kernel, related to excessive interleaving, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to excessive intermingling of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.0024EPSS
SaveExploits0References14Affected Software4
OSV
OSV
•added 2025/07/03 8:08 p.m.•18 views

CVE-2025-52554 n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential...

4.9CVSS6.5AI score
SaveExploits0References6
Mend
Mend
•added 2025/07/03 8:08 p.m.•7 views

CVE-2025-52554

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential...

5CVSS0.00367EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/07/03 2:06 p.m.•29 views

n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

Summary Denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. Impact This is a Denial of Service DoS vulnerability that allows authenticated attackers to cause service unavailability through malformed filesystem URI...

4.9CVSS6.8AI score0.00472EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/07/03 1:15 p.m.•22 views

CVE-2025-49595

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. This allows authenticated attackers to cause service unavailability through malformed...

4.9CVSS0.00472EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/07/03 12:16 p.m.•30 views

CVE-2025-49595 n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. This allows authenticated attackers to cause service unavailability through malformed...

4.9CVSS0.00472EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/03 12:00 a.m.•6 views

CVE-2025-52554: Missing Authorization

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential...

4.9CVSS5.7AI score0.00367EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/03 12:00 a.m.•21 views

n8n 安全漏洞

n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in n8n versions prior to 1.99.1, which stems from an authorization vulnerability in the /rest/executions/:id/stop endpoint that could lead to a business interruption...

4.9CVSS6.3AI score0.00367EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/07/03 12:00 a.m.•19 views

The vulnerability of the net/smc/smc_clc.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/smc/smcclc.c component in the Linux operating system is related to the lack of control over security for administrators. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.7AI score0.00772EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder