Lucene search
+L

7519 matches found

Positive Technologies
Positive Technologies
added 2025/06/11 12:0 a.m.10 views

PT-2025-25227 · Motorola · Edge 40 Pro +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer exception vulnerability was reported in the fingerprint sensor service, which could allow a local attacker to cause a denial of service. Recommendations: At the moment, there ...

2.8CVSS6.1AI score0.00111EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/06/10 12:0 a.m.7 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15522)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS version 5.0.0, which can be exploited by an attacker to cause certain exception types to go uncaught...

8.1CVSS7AI score0.00257EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/06/09 4:56 a.m.22 views

Information Disclosure

com.fasterxml.jackson.core, jackson-core is vulnerable to information disclosure. The vulnerability is due to incorrect handling of byte array offsets in the JsonLocation.appendSourceDesc method, causing exception messages to leak unintended memory content, allows an attacker to access sensitive...

4CVSS3.9AI score0.00339EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.9 views

The vulnerability of the f2fs_resize_fs() function in the fs/f2fs/gc.c module of the F2FS file system support in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the f2fsresizefs function in the fs/f2fs/gc.c module of the F2FS file system support in Linux operating systems is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00236EPSS
SaveExploits0References14Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/08 7:19 a.m.16 views

CVE-2025-48905

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types...

8.1CVSS8AI score0.00257EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/07 12:10 a.m.21 views

GHSA-WF8F-6423-GFXG Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

Overview A flaw in Jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content to be included in exception messages. When parsing JSON from a byte array with an offset and length, the exception message incorrectly reads from the beginning of the array...

4CVSS7.1AI score0.76249EPSS
SaveExploits6References6
Github Security Blog
Github Security Blog
added 2025/06/07 12:10 a.m.33 views

Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

Overview A flaw in Jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content to be included in exception messages. When parsing JSON from a byte array with an offset and length, the exception message incorrectly reads from the beginning of the array...

4CVSS7.1AI score0.00339EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/06 10:43 p.m.15 views

CVE-2025-49128

A flaw was found in the Jackson-core JsonLocation.appendSourceDesc method. This vulnerability allows up to 500 bytes of unintended memory content to be included in exception messages. This issue may lead to unintended information disclosure. Mitigation If upgrading is not immediately possible,...

4CVSS4.1AI score0.00339EPSS
SaveExploits0References6
NVD
NVD
added 2025/06/06 10:15 p.m.19 views

CVE-2025-49128

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS0.00339EPSS
SaveExploits0References3
OSV
OSV
added 2025/06/06 10:15 p.m.1 views

DEBIAN-CVE-2025-49128

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS7.2AI score0.00339EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/06 10:15 p.m.2 views

UBUNTU-CVE-2025-49128

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS7.2AI score0.00339EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/06/06 9:45 p.m.2 views

Information Exposure

Overview com.fasterxml.jackson.core:jackson-core is a Core Jackson abstractions, basic JSON streaming API implementation Affected versions of this package are vulnerable to Information Exposure due to the JsonLocation.appendSourceDesc method. An attacker can access up to 500 bytes of unintended...

5.1CVSS7AI score0.00339EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/06 9:18 p.m.23 views

CVE-2025-49128 Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS0.00339EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/06/06 9:18 p.m.6 views

CVE-2025-49128 Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS4.6AI score0.00339EPSS
SaveExploits0References3
OSV
OSV
added 2025/06/06 9:18 p.m.7 views

CVE-2025-49128 Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS7.9AI score0.00339EPSS
SaveExploits0References5
CVE
CVE
added 2025/06/06 9:18 p.m.231 views

CVE-2025-49128

CVE-2025-49128 : Jackson-core contains a low-level JSON streaming parser/generator used by Jackson Data Processor. In versions 2.0.0 up to but not including 2.13.0, a flaw in JsonLocation._appendSourceDesc allows up to 500 bytes of unintended memory content to be included in exception messages wh...

4CVSS4.1AI score0.00339EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/06/06 9:18 p.m.13 views

CVE-2025-49128

Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's JsonLocation.appendSourceDesc method allows up to 500 bytes of unintended memory content t...

4CVSS7.2AI score0.00339EPSS
SaveExploits0
OSV
OSV
added 2025/06/06 7:15 a.m.7 views

CVE-2025-48905

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types...

8.1CVSS5.8AI score0.00257EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/06 7:15 a.m.16 views

CVE-2025-48905

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types...

8.1CVSS0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 6:38 a.m.6 views

CVE-2025-48905

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types...

8.1CVSS8.2AI score0.00257EPSS
SaveExploits0References1
Rows per page
Query Builder