11248 matches found
f2fs DoS
The vulnerability of the f2fs component of the Linux operating system’s kernel is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Media DoS
The vulnerability of the Linux operating system’s kernel media component is related to defects in exception handling in the mxcjpegprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel MPTCP Subflow Clean Heap Buffer Overflow DoS
The vulnerability of the mptcpsubflowqueueclean function in the net/mptcp/subflow.c module of the MPTCP protocol implementation in the Linux operating system is related to improper cleaning when handling exceptions. Exploiting this vulnerability can allow a attacker to cause service failures...
Mageia: Security Advisory (MGASA-2025-0134)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-31935
Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4819143444725760 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
MGASA-2025-0134 Updated poppler packages fix security vulnerabilities
A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INTMIN. CVE-2025-32364 Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine...
Updated poppler packages fix security vulnerabilities
A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INTMIN. CVE-2025-32364 Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine...
CVE-2025-31935
CVE-2025-31935 concerns Subnet Solutions PowerSYSTEM Center. The issue is described as a mishandling of exceptional conditions: crafted data passed to the API can trigger an exception, resulting in a denial-of-service condition. CVSS metrics indicate a Local attack vector with Low attack complexi...
OESA-2025-1406 transfig security update
The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes:...
OESA-2025-1390 poppler security update
is a PDF rendering library. Security Fixes: A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INTMIN.CVE-2025-32364 Poppler before 25.04.0 allows crafted input files to trigger...
CVE-2025-0129: Improper Check for Unusual or Exceptional Conditions
An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions...
GHSA-RQ86-9M6R-CM3G SurrealDB has uncaught exception in Net module that leads to database crash
A vulnerability was found where an attacker can crash the database via crafting a HTTP query that returns a null byte. The problem relies on an uncaught exception in the net module, where the result of the query will be converted to JSON before showing as the HTTP response to the user in the /sql...
javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6043660296978432 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
PT-2026-60952
Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.2.2 Description An uncaught exception exists in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the '/sql' endpoint, causing a...
Linux kernel DoS
The vulnerability of the Linux operating system’s kernel is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-20664
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...
javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5809784446320640 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
CVE-2025-20663
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-30...