11277 matches found
CVE-2024-29076
Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-29076
Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...
Intel CST security vulnerabilities
Intel CST is an application from Intel Corporation USA. A security vulnerability exists in Intel CST versions prior to 8.7.10803 that stems from a failure to properly catch an exception, which could result in a system denial of service...
kernel: dm snapshot: fix lockup in dm_exception_table_exit
In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit The Linux kernel CVE team has assigned CVE-2024-35805 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051739-CVE-2024-35805-179f@gregkh/T...
CVE-2024-51750: Uncaught Exception
Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85...
PT-2024-10150 · Mullvad · Mullvad Vpn Client
Name of the Vulnerable Software and Affected Versions: Mullvad VPN client versions 2024.6 Desktop through 2024.8 iOS Mullvad VPN client version 2024.8-beta1 Android Description: The exception-handling alternate stack in the Mullvad VPN client can be exhausted, leading to heap-based out-of-bounds...
Exception unhandled, lead to server crash
Description In node js express, if exception is uncaught, the server will crash. fs module sometimes throw exception when dealing with file upload. Unauth user can send something to the server trigger the exception lead to server crash. Proof of Concept import requests import random import string...
Leakage of Langfuse API keys in team exception handling
This report is not public...
Intel Raid Web Console DoS
The vulnerability of the Intel Raid Web Console web console relates to an exception handling error. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-47072
XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the...
GHSA-HFQ9-HGGM-C56Q XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
Impact The vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. Patches XStream 1.4.21 detects the manipulation ...
Exploit for Deserialization of Untrusted Data in Alibaba Fastjson
CVE-2022-25845-In-Spring 主要依赖 1. jackson 2. commons-io 快...
CVE-2024-50141: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFIMEMORYRUNTIME block for PRM handler and context PRMT needs to find the correct type of block to translate the PA-VA mapping for EFI runtime services. The issue arises because the PRMT is finding a block of type...
CVE-2024-50111 LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if doale triggered in irq-enabled context Unaligned access exception can be triggered in irq-enabled context such as user mode, in this case doale may call getuser which may cause sleep. Then we will get: BU...
CVE-2024-50111 LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if doale triggered in irq-enabled context Unaligned access exception can be triggered in irq-enabled context such as user mode, in this case doale may call getuser which may cause sleep. Then we will get: BU...
CVE-2024-50111
CVE-2024-50111 affects LoongArch Linux kernel where unaligned access can trigger in irq-enabled context; do_ale() may call get_user(), causing sleep and BUG: sleeping function called from invalid context. The fix described in the unpatched Nessus entry is to enable IRQ handling for unaligned acce...
CVE-2024-50111: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if doale triggered in irq-enabled context Unaligned access exception can be triggered in irq-enabled context such as user mode, in this case doale may call getuser which may cause sleep. Then we will get: BU...
CVE-2024-51560 Improper Error Handling Vulnerability in Wave 2.0
This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message...
curvesapi:ParseFuzzer: Security exception in com.graphbuilder.math.ExpressionTree.build
Project: https://github.com/virtuald/curvesapi.git Detailed Report: https://oss-fuzz.com/testcase?key=5500605042327552 Project: curvesapi Fuzzing Engine: libFuzzer Fuzz Target: ParseFuzzer Job Type: libfuzzerasancurvesapi Platform Id: linux Crash Type: Security exception Crash Address: Crash Stat...
OSV-2024-1254 Security exception in org.apache.lucene.util.ArrayUtil.growExact
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...