Lucene search
+L

349 matches found

Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.7 views

PT-2025-9008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue has been identified in the Linux kernel. The problem occurs when the sysfs -store function is called while a queue is frozen, and memory allocation with GFP...

5.5CVSS5.9AI score0.00124EPSS
SaveExploits0References98
SUSE CVE
SUSE CVE
added 2025/02/26 2:20 a.m.4 views

SUSE CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

7CVSS7.3AI score0.00386EPSS
SaveExploits0References16
OSV
OSV
added 2025/02/25 4:15 p.m.9 views

AZL-57274 CVE-2025-26600 affecting package xorg-x11-server 1.20.10-6

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

7.8CVSS7.1AI score0.00386EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/02/25 4:15 p.m.3 views

CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

7.8CVSS7AI score0.00386EPSS
SaveExploits0References18Affected Software17
OSV
OSV
added 2025/02/25 4:15 p.m.15 views

AZL-57468 CVE-2025-26600 affecting package xorg-x11-server for versions less than 1.20.10-15

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

7.8CVSS7.1AI score0.00386EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/25 4:15 p.m.1 views

DEBIAN-CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

7.8CVSS7.5AI score0.00386EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/25 3:0 p.m.4 views

UBUNTU-CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

7.8CVSS7.1AI score0.00386EPSS
SaveExploits0References6
NVD
NVD
added 2025/01/27 11:15 a.m.20 views

CVE-2025-0696

A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS0.00349EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/27 11:12 a.m.8 views

CVE-2025-0696

A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS5.2AI score0.00349EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/27 11:12 a.m.28 views

CVE-2025-0696

A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS0.00349EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/27 11:12 a.m.71 views

CVE-2025-0696

CVE-2025-0696 affects Cesanta Frozen prior to 1.7. The vulnerability is a NULL Pointer Dereference in the JSON input processing path that can crash the component embedding the library. Impact is a LOW availability hit with no confidentiality or integrity impact according to the CVSS vector in the...

5.3CVSS6.8AI score0.00349EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/27 11:12 a.m.3 views

CVE-2025-0696

A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS5.9AI score0.00349EPSS
SaveExploits0References4
CVE
CVE
added 2025/01/27 11:11 a.m.62 views

CVE-2025-0695

CVE-2025-0695 affects Cesanta Frozen library prior to version 1.7. The vulnerability is an unbounded Allocation of Resources Without Limits or Throttling, allowing an attacker to crash the component embedding the library by supplying malicious JSON input. Affected scope is Cesanta Frozen versions

5.3CVSS6.8AI score0.00349EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/27 11:11 a.m.7 views

CVE-2025-0695

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS5.2AI score0.00349EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/27 11:11 a.m.17 views

CVE-2025-0695

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS0.00349EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/27 11:11 a.m.4 views

CVE-2025-0695

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS5.9AI score0.00349EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.9 views

frozen 代码问题漏洞

frozen is an open source JSON parser and generator for C/C++ from Cesanta Software. A code issue exists in frozen versions prior to 1.7, which is caused by a null pointer dereference. An attacker exploiting this vulnerability could trigger a crash of a component embedded in the library by providi...

5.3CVSS6.9AI score0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.7 views

PT-2025-4004 · Cesanta · Cesanta Frozen

Name of the Vulnerable Software and Affected Versions: Cesanta Frozen versions less than 1.7 Description: An Allocation of Resources Without Limits or Throttling issue allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

5.3CVSS7.2AI score0.00349EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.9 views

frozen 安全漏洞

frozen is an open source JSON parser and generator for C/C++ from Cesanta Software. A security vulnerability exists in frozen prior to version 1.7, which stems from an unrestricted resource allocation. An attacker can exploit this vulnerability to cause components embedded in the library to crash...

5.3CVSS6.8AI score0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.10 views

PT-2025-4005 · Cesanta · Cesanta Frozen

Name of the Vulnerable Software and Affected Versions: Cesanta Frozen versions prior to 1.7 Description: A NULL Pointer Dereference vulnerability allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input. Recommendations: For...

5.3CVSS7.1AI score0.00349EPSS
SaveExploits0References6
Rows per page
Query Builder