Lucene search
+L

4523 matches found

BDU FSTEC
BDU FSTEC
•added 2025/07/24 12:00 a.m.•19 views

The vulnerability in the module drivers/media/usb/cx231xx/cx231xx-417.c of Linux kernel allows a hacker to cause a service failure.

The vulnerability in the module drivers/media/usb/cx231xx/cx231xx-417.c of Linux operating systems is related to incorrect handling of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.6AI score0.00208EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
•added 2025/07/24 12:00 a.m.•12 views

The vulnerability of the Apache Tomcat application server, related to synchronization errors when using a shared resource (“Race Condition”), allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

5.6CVSS8.1AI score0.02074EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/07/24 12:00 a.m.•19 views

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.6CVSS8.3AI score0.02129EPSS
SaveExploits0References7Affected Software6
Cvelist
Cvelist
•added 2025/07/23 7:57 p.m.•43 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS0.00194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/23 12:00 a.m.•27 views

The vulnerability of the Suricata intrusion detection and prevention system, due to the unlimited distribution of resources, allows an intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS5.5AI score0.00471EPSS
SaveExploits0References8Affected Software5
NVD
NVD
•added 2025/07/22 3:15 p.m.•14 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00196EPSS
SaveExploits0References6
OSV
OSV
•added 2025/07/22 3:15 p.m.•13 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

5.8AI score
SaveExploits0References4
OSV
OSV
•added 2025/07/22 3:15 p.m.•16 views

AZL-65646 CVE-2025-4878 affecting package libssh for versions less than 0.10.6-3

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.3AI score0.00196EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/22 3:15 p.m.•8 views

DEBIAN-CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/22 2:17 p.m.•6 views

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00196EPSS
SaveExploits0References6
Mend
Mend
•added 2025/07/22 2:17 p.m.•3 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00196EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/07/22 2:17 p.m.•50 views

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00196EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2025/07/22 2:17 p.m.•28 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00196EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/07/22 2:17 p.m.•20 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.1AI score0.00196EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/07/22 12:00 a.m.•16 views

The vulnerability of the TTY driver in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the TTY driver in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.5AI score0.00191EPSS
SaveExploits0References14Affected Software7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•2 views

CVE-2025-4878: Use After Free

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS5.7AI score0.00196EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/07/21 11:25 p.m.•15 views

SUSE CVE-2025-7700

A flaw was found in FFmpeg's ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

5.3CVSS6.1AI score0.00375EPSS
SaveExploits0References9
Patchstack
Patchstack
•added 2025/07/21 10:24 p.m.•24 views

WordPress Orion Login with SMS plugin <= 1.0.5 - Authenticated Bypass via Weak OTP vulnerability

Authenticated Bypass via Weak OTP vulnerability discovered by kr0d in WordPress Plugin Orion Login with SMS versions = 1.0.5...

8.1CVSS6.7AI score0.00505EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/21 12:00 a.m.•21 views

The vulnerability of the ColdFusion software platform lies in the improper limitation of XML references to external objects. This allows attackers to gain unauthorized access to protected information or circumvent existing security restrictions, thereby causing service failures.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or circumvent existing security...

9.3CVSS5.5AI score0.00674EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/21 12:00 a.m.•16 views

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Daemon Routing Protocol rpd in Junos OS and Junos OS Evolved operating systems is related to improper handling of parameter length discrepancies. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.5CVSS7.2AI score0.00295EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder