13593 matches found
cpcap-charger DoS
The vulnerability of the cpcap-charger component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...
mm/ptdump Kernel DoS
The vulnerability of the mm/ptdump component in the Linux operating system’s kernel is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to cause service failures...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the mm/vmalloc.c component of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...
drm/imagination Component DoS
The vulnerability of the drm/imagination component in the Linux operating system is related to state management errors. Exploiting this vulnerability allows a perpetrator to cause service failures...
JD Edwards EnterpriseOne Tools Data Access
The vulnerability of the Object and Environment Tech components of the JD Edwards EnterpriseOne Tools system management resource solution is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...
Linux kernel Heap Buffer Overflow DoS
The vulnerabilities in the mm/memory-failure.c and mm/vmscan.c components of the Linux operating system’s kernel are related to errors during resource release. Exploiting these vulnerabilities allows an attacker to cause service failures...
Linux vfio/pds DoS
The vulnerability of the vfio/pds component in Linux operating systems is related to resource management errors. Exploiting this vulnerability allows an attacker to cause system failures...
net/tls DoS
The vulnerability of the net/tls component in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...
imxfb Kernel DoS
The vulnerability of the imxfb component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
Linux kernel drm/sched DoS
The vulnerability of the drm/sched component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows a perpetrator to cause service failures...
Linux driver Net USB Asix DoS
The vulnerability in the net/usb/asixdevices.c driver of the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...
Linux HFS Plus Buffer Overflow DoS
The vulnerability of the fs/hfsplus/xattr.c component in the Linux operating system is related to state management errors. Exploiting this vulnerability allows an attacker to cause a service failure...
Linux Powerpc Eeh DoS
The vulnerability of the powerpc/eeh module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...
Linux rose_route.c Confidential Data Access Privilege Escalation
The vulnerability of the roseroute.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
rtw89 Component Kernel DoS
The vulnerability of the rtw89 component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
CVE-2025-67724 Tornado vulnerable to Header Injection and XSS via reason argument
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers where it could be used for header injection or in HTML in the default error page where it could be used for XSS and can be exploited by...
CVE-2025-66452 LibreChat's lack of JSON parsing error handling can lead to XSS
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json includes user input in the error message, which gets reflected in responses. User input including HTML/JavaScript can be exposed in error...
CVE-2025-66452
LibreChat (versions ≤ 0.8.0) is affected by a lack of handling for JSON parsing errors in express.json(). A SyntaxError triggered by user input can be reflected in error responses, exposing input (including HTML/JavaScript) and creating an XSS risk if Content-Type isn’t strictly enforced. The iss...
EUVD-2025-202928
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json includes user input in the error message, which gets reflected in responses. User input including HTML/JavaScript can be exposed in error...