7596 matches found
ARM Mbed OS 安全漏洞
ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things from ARM UK. A security vulnerability exists in ARM Mbed OS version 6.16.0, which originates from a buffer overflow triggered by a function that will continue to write to a temporary header buffer...
CVE-2024-52582
Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...
CVE-2024-52582
Cachi2 (open source CLI) is affected up to version 0.13.x; when an unhandled exception occurs, the tool logs function locals, potentially exposing secrets in CI/build logs. Version 0.14.0 includes a patch to fix this. No other exploit details are provided in the documents. Remediation: upgrade to...
CVE-2024-52582 cachi2 allows traceback prints locals
Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...
CVE-2024-52582 cachi2 allows traceback prints locals
Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...
Apache Tomcat - Authentication Bypass
Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the...
The vulnerability of the dm snapshot component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the dm snapshot component in the Linux operating system’s kernel is related to improper locking of resources in the dmexceptiontableexit function. Exploiting this vulnerability can allow an attacker to cause a service failure...
OSV-2024-1313 Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379008019 Crash type: Security exception Crash state: org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.PhoneticEngine$PhonemeBuilder.app...
OSV-2024-1311 Security exception in java.base/java.util.Arrays.copyOfRange
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836879 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...
CVE-2024-29076
Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-29076
Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...
Intel CST 安全漏洞
Intel CST is an application from Intel Corporation USA. A security vulnerability exists in Intel CST versions prior to 8.7.10803 that stems from a failure to properly catch an exception, which could result in a system denial of service...
kernel: dm snapshot: fix lockup in dm_exception_table_exit
In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit The Linux kernel CVE team has assigned CVE-2024-35805 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051739-CVE-2024-35805-179f@gregkh/T...
PT-2024-10150 · Mullvad · Mullvad Vpn Client
Name of the Vulnerable Software and Affected Versions: Mullvad VPN client versions 2024.6 Desktop through 2024.8 iOS Mullvad VPN client version 2024.8-beta1 Android Description: The exception-handling alternate stack in the Mullvad VPN client can be exhausted, leading to heap-based out-of-bounds...
Exception unhandled, lead to server crash
Description In node js express, if exception is uncaught, the server will crash. fs module sometimes throw exception when dealing with file upload. Unauth user can send something to the server trigger the exception lead to server crash. Proof of Concept import requests import random import string...
Leakage of Langfuse API keys in team exception handling
This report is not public...
The vulnerability in the Intel Raid Web Console, related to an error in handling exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the Intel Raid Web Console web console relates to an exception handling error. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-47072
XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the...
GHSA-HFQ9-HGGM-C56Q XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
Impact The vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. Patches XStream 1.4.21 detects the manipulation ...
