90462 matches found
CVE-2024-58364 SurrealDB before 1.2.1 Denial of Service via Parsing Error
SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing...
CVE-2024-58364
CVE-2024-58364 affects SurrealDB before 1.2.1. An uncaught exception in the span rendering path triggers a panic when parsing malformed queries with errors on line terminator characters, leading to server denial of service. Public details in the connected sources indicate the impact is an in-proc...
CVE-2024-58361
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...
CVE-2024-58361
SurrealDB is affected in versions before 2.0.4 by an uncaught exception in the parser error rendering path when processing empty strings. Authorized clients can issue malformed queries that convert empty strings to record, duration, or datetime types, triggering a panic in error rendering and cra...
CVE-2024-58361 SurrealDB before 2.0.4 Denial of Service via Parser Exception
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...
CVE-2024-58361 SurrealDB before 2.0.4 Denial of Service via Parser Exception
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...
EUVD-2024-55677
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...
CVE-2024-58361 SurrealDB before 2.0.4 Denial of Service via Parser Exception
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...
Linux Distros Unpatched Vulnerability : CVE-2026-47180
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name...
SurrealDB resource management error vulnerability
Versions prior to SurrealDB 2.0.5, versions 2.1.x up to and including 2.1.5, and versions 2.2.x up to and including 2.2.2 contain a resource management error vulnerability. This vulnerability arises because, when script functionality is explicitly enabled via --allow-scripting or --allow-all,...
CVE-2024-58361: Uncaught Exception
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...
PT-2026-60989
Name of the Vulnerable Software and Affected Versions Flow Payment plugin for WordPress version 3.0.8 Description Reflected cross-site scripting occurs on the WooCommerce checkout page when the plugin handles order cancellations. The error message GET parameter is passed to the wc add notice...
SurrealDB format string error vulnerability
Versions of SurrealDB prior to 1.1.1 contain a formatting string error vulnerability. This vulnerability arises when scripts are enabled; it stems from a formatting string flaw within the rquickjs Exception::throwtype function. As a result, attackers with script privileges may supply a sequence o...
SurrealDB resource management error vulnerability
Versions prior to SurrealDB 2.2.2, 2.1.5, and 2.0.5 contain a resource management error vulnerability. This vulnerability arises from improper implementation of recursion limits when script functionality is enabled. When local functions include embedded JavaScript that triggers new queries,...
SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3089-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...
SurrealDB resource management error vulnerability
Versions prior to SurrealDB 2.0.5, versions 2.1.x up to and including 2.1.5, and versions 2.2.x up to and including 2.2.2 contain a resource management error vulnerability. This vulnerability arises when defining custom database functions via DEFINE FUNCTION using nested FOR loops without...
CVE-2026-54490
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...
GHSA-G77H-45RF-HCX4 ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
Summary ExifReader 4.40.0 can throw an uncaught RangeError: Offset is outside the bounds of the DataView while parsing crafted HEIC/AVIF files. The file only needs a valid leading ftyp box with a HEIC/AVIF major brand followed by a malformed ISO-BMFF box, such as an empty 8-byte free box or a...
ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
Summary ExifReader 4.40.0 can throw an uncaught RangeError: Offset is outside the bounds of the DataView while parsing crafted HEIC/AVIF files. The file only needs a valid leading ftyp box with a HEIC/AVIF major brand followed by a malformed ISO-BMFF box, such as an empty 8-byte free box or a...
CVE-2026-8861
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...