CVE-2025-48905

CVE-2025-48905 concerns a Wasm exception capture vulnerability in the arkweb v8 module. The available connected sources identify the issue as causing a failure to capture certain Wasm exception types, but do not specify affected versions beyond identifying the arkweb v8 module as vulnerable. Repo...

CVE-2025-48905

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types...

OSV-2025-442 Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422516687 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$8.process org.jsoup.parser.TreeBuilder.currentElement...

PT-2025-25510 · Git +1 · Jsoup

Name of the Vulnerable Software and Affected Versions: jsoup affected versions not specified Description: The software is susceptible to a security exception during HTML processing. The crash occurs within the org.jsoup.parser.HtmlTreeBuilder class, specifically during the process and...

PT-2025-24332 · Vert.X +3 · Vert.X +3

Name of the Vulnerable Software and Affected Versions: jackson-core versions 2.0.0 through 2.13.0 Description: A flaw in jackson-core's JsonLocation. appendSourceDesc method allows up to 500 bytes of unintended memory content to be included in exception messages. When parsing JSON from a byte arr...

PT-2025-24024 · Unknown · Arkweb V8 Module

Name of the Vulnerable Software and Affected Versions: arkweb v8 module affected versions not specified Description: The issue is related to a Wasm exception capture vulnerability in the arkweb v8 module. Successful exploitation of this vulnerability may cause the failure to capture specific Wasm...

GHSA-G5HG-P3PH-G8QG Multer vulnerable to Denial of Service via unhandled exception

Impact A vulnerability in Multer versions =1.4.4-lts.1, 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes an unhandled exception, leading to a crash of the process. Patches Users should upgrade to 2.0...

Multer vulnerable to Denial of Service via unhandled exception

Impact A vulnerability in Multer versions =1.4.4-lts.1, 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes an unhandled exception, leading to a crash of the process. Patches Users should upgrade to 2.0...

OSV-2025-436 Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211 Crash type: Security exception Crash state: graphql.parser.GraphqlAntlrToLanguage.createNonNullType graphql.parser.GraphqlAntlrToLanguage.createType graphql.parser.GraphqlAntlrToLanguage.createListType...

The vulnerability in the `drivers/nvme/host/rdma.c` driver of the Linux operating system’s NVMe kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/nvme/host/rdma.c file of the Linux operating system’s NVMe kernel driver is related to insufficient handling of exception states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SUSE: Security Advisory (SUSE-SU-2025:1342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:1339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js

A flaw was found in Node.js, specifically in the C++ method SignTraits::DeriveBits. This vulnerability can allow a remote attacker to crash the Node.js runtime via untrusted input, triggering an exception in a background thread...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in makeMiddleware, when processing a file upload request. An attacker can cause the application to crash by sending a request with a field name containing an empty string. Remediation A fix was pushed into the master...

CVE-2025-48997 Multer vulnerable to Denial of Service via unhandled exception

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes ...

CVE-2025-48997 Multer vulnerable to Denial of Service via unhandled exception

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes ...

PT-2025-23654

Name of the Vulnerable Software and Affected Versions Multer versions 1.4.4-lts.1 through 2.0.0 Description A Denial of Service DoS issue is present, allowing an attacker to crash the process by sending an upload file request with an empty string field name, causing an unhandled exception...

The vulnerability of Linux kernel’s mm/hugetlb components, which allows attackers to trigger a service failure

The vulnerability of Linux kernel’s mm/hugetlb components is related to exception handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-20677

In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284...

CVE-2025-20673

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304...