Lucene search
K

3544 matches found

CNNVD
CNNVD
added 2025/10/16 12:0 a.m.3 views

Eclipse ThreadX NetX Duo 安全漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.4, which stems from a potential out-of-bounds read issue in the nxippacketreceive function when receiving Ethernet...

6.9CVSS6.7AI score0.00336EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/15 2:11 p.m.3 views

EUVD-2025-34620

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read...

6.9CVSS6.4AI score0.00229EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 11:15 a.m.4 views

CVE-2025-55081

In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the nxsecuretlsprocessclienthello function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside o...

9.1CVSS0.00337EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/15 11:3 a.m.3 views

EUVD-2025-34607

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in nxsecuretlsprocessclienthello because of a missing validation of PSK length provided in the user message...

6.9CVSS6.2AI score0.00229EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 7:49 a.m.4 views

CVE-2025-55078

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service crash by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region...

5.7CVSS6.8AI score0.00159EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/15 5:41 a.m.4 views

EUVD-2025-34534

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS6.5AI score0.00126EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 5:16 a.m.13 views

CVE-2025-55079

In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't performed, allowing, as a result, to obtain a thread with higher priority than expected and causing a possible denial of service...

5.7CVSS0.00157EPSS
Exploits1References1
CVE
CVE
added 2025/10/15 4:29 a.m.14 views

CVE-2025-55079

CVE-2025-55079 refers to Eclipse ThreadX RTOS prior to 6.4.3, where the thread module’s maximum priority check could be bypassed, allowing a thread to run at a higher priority than intended and cause a potential denial of service. This is corroborated by Red Hat and other industry sources in the ...

5.7CVSS6.4AI score0.00157EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.2 views

Eclipse ThreadX RTOS 安全漏洞

Eclipse ThreadX RTOS is an advanced real-time operating system RTOS from Eclipse ThreadX designed for deeply embedded applications. A security vulnerability exists in Eclipse ThreadX RTOS versions prior to 6.4.3 that stems from not properly checking the maximum priority setting of the thread...

5.7CVSS6.5AI score0.00157EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.3 views

Eclipse ThreadX RTOS 安全漏洞

Eclipse ThreadX RTOS is an advanced real-time operating system RTOS from Eclipse ThreadX designed for deeply embedded applications. A security vulnerability exists in Eclipse ThreadX RTOS versions prior to 6.4.3, which stems from insufficient validation of a system call parameter when memory...

7.2CVSS6.7AI score0.00126EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.11 views

Eclipse ThreadX NetX Duo 安全漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.4, which stems from a lack of validation of the cipher suite length and compression method length in SSL/TLS client...

9.1CVSS6.6AI score0.00337EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.3 views

Eclipse ThreadX NetX Duo 安全漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.4, which stems from incorrect boundary checking of an Eclipse Foundation ThreadX component, which could lead to...

6.9CVSS6.6AI score0.00229EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.5 views

PT-2025-42235

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS7AI score0.00126EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/10/14 5:59 p.m.2 views

org.eclipse.jgit: XXE vulnerability in Eclipse JGit

A flaw was found in Eclipse JGit. This vulnerability can allow information disclosure, denial of service, and other security issues when parsing XML files...

6.8CVSS7.1AI score0.0108EPSS
Exploits1References7
OSV
OSV
added 2025/10/14 8:15 a.m.4 views

CVE-2025-55078

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service crash by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region...

5.5CVSS6.8AI score
Exploits0References1
NVD
NVD
added 2025/10/14 8:15 a.m.8 views

CVE-2025-55078

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service crash by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region...

5.7CVSS0.00159EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/10/14 7:28 a.m.6 views

CVE-2025-55078 Incomplete validation of kernel object pointers in system calls

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service crash by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region...

5.7CVSS6.4AI score0.00159EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.2 views

Eclipse ThreadX RTOS 安全漏洞

Eclipse ThreadX RTOS is an advanced real-time operating system RTOS designed for deeply embedded applications from Eclipse ThreadX. A security vulnerability exists in Eclipse ThreadX RTOS versions prior to 6.4.3 that stems from an unverified pointer out of a module memory region, which could lead...

5.7CVSS6.4AI score0.00159EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.5 views

PT-2025-41858

Name of the Vulnerable Software and Affected Versions Eclipse ThreadX versions prior to 6.4.3 Description An attacker can cause a denial of service crash by providing a pointer to a reserved or unmapped memory region. The system calls had a pointer check, but it did not verify if the pointer was...

5.7CVSS6.6AI score0.00159EPSS
Exploits1References4
GithubExploit
GithubExploit
added 2025/10/11 7:24 a.m.415 views

Exploit for Race Condition in Vercel Next.Js

CVE-2025-32421 Eclipse Technique Lab Comprehensive demonstrat...

7.5CVSS6.7AI score0.58124EPSS
Exploits4
Rows per page
Query Builder