Lucene search
+L

11213 matches found

OSS-Fuzz
OSS-Fuzz
•added 2025/06/04 6:19 a.m.•7 views

graphql-java:GraphqlFuzzer: Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

Project: https://github.com/graphql-java/graphql-java.git Detailed Report: https://oss-fuzz.com/testcase?key=5640134358007808 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2025/06/04 5:59 a.m.•10 views

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.MemberValueArrayInitializer

Detailed Report: https://oss-fuzz.com/testcase?key=5191040095289344 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

5.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/06/04 12:00 a.m.•12 views

Linux NVMe Kernel DoS

The vulnerability in the drivers/nvme/host/rdma.c file of the Linux operating system’s NVMe kernel driver is related to insufficient handling of exception states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.7CVSS6.8AI score0.00823EPSS
SaveExploits0References8Affected Software5
OpenVAS
OpenVAS
•added 2025/06/04 12:00 a.m.•10 views

SUSE: Security Advisory (SUSE-SU-2025:1342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS5AI score0.00265EPSS
SaveExploits2References6
OpenVAS
OpenVAS
•added 2025/06/04 12:00 a.m.•6 views

SUSE: Security Advisory (SUSE-SU-2025:1339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS5AI score0.00265EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2025/06/03 8:28 p.m.•19 views

nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js

A flaw was found in Node.js, specifically in the C++ method SignTraits::DeriveBits. This vulnerability can allow a remote attacker to crash the Node.js runtime via untrusted input, triggering an exception in a background thread...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/06/03 6:43 p.m.•9 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in makeMiddleware, when processing a file upload request. An attacker can cause the application to crash by sending a request with a field name containing an empty string. Remediation A fix was pushed into the master...

9.2CVSS7AI score0.0044EPSS
SaveExploits0References2
Mend
Mend
•added 2025/06/03 6:21 p.m.•7 views

CVE-2025-48997

Multer is a node.js middleware for handling "multipart/form-data". A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request cause...

8.7CVSS0.0044EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/06/03 6:21 p.m.•13 views

CVE-2025-48997 Multer vulnerable to Denial of Service via unhandled exception

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes ...

8.7CVSS6.5AI score0.0044EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/06/03 6:21 p.m.•37 views

CVE-2025-48997 Multer vulnerable to Denial of Service via unhandled exception

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes ...

8.7CVSS0.0044EPSS
SaveExploits0References4
OSS-Fuzz
OSS-Fuzz
•added 2025/06/03 4:52 a.m.•10 views

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4642363794587648 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2025/06/03 12:36 a.m.•7 views

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.getBindingNames

Detailed Report: https://oss-fuzz.com/testcase?key=4623099557904384 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.eclipse.rdf4j.query.algebra.Join.getBindingNames...

5.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/06/03 12:00 a.m.•10 views

PT-2025-23654

Name of the Vulnerable Software and Affected Versions Multer versions 1.4.4-lts.1 through 2.0.0 Description A Denial of Service DoS issue is present, allowing an attacker to crash the process by sending an upload file request with an empty string field name, causing an unhandled exception...

8.7CVSS4.7AI score0.0044EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/03 12:00 a.m.•5 views

CVE-2025-48997: Uncaught Exception

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes ...

8.7CVSS5.6AI score0.0044EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/06/03 12:00 a.m.•18 views

Linux kernel mm/hugetlb DoS

The vulnerability of Linux kernel’s mm/hugetlb components is related to exception handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS5.9AI score0.00169EPSS
SaveExploits0References6Affected Software5
osv_cve
osv_cve
•added 2025/06/02 3:15 a.m.•23 views

CVE-2025-20677

In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284...

5.5CVSS5.9AI score0.00168EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/02 3:15 a.m.•23 views

CVE-2025-20676

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293...

5.5CVSS5.9AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/02 3:15 a.m.•26 views

CVE-2025-20676

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293...

5.5CVSS0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/02 3:15 a.m.•23 views

CVE-2025-20673

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304...

5.5CVSS0.00168EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/02 3:15 a.m.•17 views

CVE-2025-20673

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304...

5.5CVSS5.9AI score0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder