Lucene search
+L

9555 matches found

Mend
Mend
•added 2025/01/15 12:00 a.m.•9 views

CVE-2024-36751

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...

7.1CVSS5.8AI score0.00544EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/15 12:00 a.m.•29 views

CVE-2024-36751

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...

0.00544EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/15 12:00 a.m.•85 views

CVE-2024-36751

The parse-uri library (version 1.0.9 ) is vulnerable to a Regular expression Denial of Service (ReDoS) . This vulnerability occurs because of inefficient regular expression processing , which allows an attacker to provide a crafted URL that triggers excessive backtracking, leading to a denial of ...

6.5CVSS5.8AI score0.00544EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/01/14 12:00 a.m.•36 views

EulerOS 2.0 SP9 : xmlrpc-c (EulerOS-SA-2025-1067)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

9.8CVSS7.2AI score0.01686EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•3 views

PT-2025-8995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the rcar-ep PCI module. The rcar pcie parse outbound ranges function uses the devm request mem region macro to...

7.1CVSS6.2AI score0.00205EPSS
SaveExploits0
osv_debian
osv_debian
•added 2025/01/10 1:15 p.m.•5 views

DEBIAN-CVE-2024-57822

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

5.5CVSS5.6AI score0.00292EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/01/10 1:15 p.m.•23 views

UBUNTU-CVE-2024-57822

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

5.5CVSS5.6AI score0.00292EPSS
SaveExploits1References5
osv_usn
osv_usn
•added 2025/01/09 4:31 p.m.•20 views

USN-7197-1 golang-golang-x-net vulnerability

Guido Vranken discovered that Go Networking handled input to the Parse functions inefficiently. An attacker could possibly use this issue to cause denial of service. This update addresses the issue in the golang-golang-x-net and golang-golang-x-net-dev packages, as well as the library vendored...

5.3CVSS6.7AI score0.01072EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/01/07 3:48 a.m.•16 views

SUSE CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS6.1AI score0.00207EPSS
SaveExploits0References14
osv_debian
osv_debian
•added 2025/01/06 5:15 p.m.•14 views

DEBIAN-CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS6.3AI score0.00207EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/01/06 5:15 p.m.•21 views

UBUNTU-CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS6.3AI score0.00207EPSS
SaveExploits0References38
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•23 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the tracing module that triggers a warning in bitmapparseuser when a large count value is supplied and there ...

5.5CVSS6.6AI score0.00207EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/01/04 12:00 a.m.•21 views

Job Recruitment System cn_update() Function Code Execution

The vulnerability of the cnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing parameters urle and cname. Exploiting this vulnerability can allow an attacker, operating...

7.5CVSS8.1AI score0.00643EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/04 12:00 a.m.•22 views

Job Recruitment System fln_update() Code Execution

The vulnerability of the flnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing the parameters fname and lname. Exploiting this vulnerability can allow an intruder to gain...

7.5CVSS8.1AI score0.00643EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•15 views

PT-2026-3064

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description The software contains an out-of-bounds read issue in the oggdmx parse tags function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

8.5CVSS7.6AI score0.00428EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•23 views

PT-2026-3089

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the uncv parse config function. This issue can be triggered by processing a specially crafted MP4 file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...

5.5CVSS5.9AI score0.00214EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2025-32538 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A flaw exists in the parse smacro template function within the preproc.c file. This issue leads to a null pointer dereference. Local access is required for exploitation. An exploit has been...

4.8CVSS5AI score0.00266EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•27 views

PT-2025-3758 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability has been found in code-projects Job Recruitment, affecting an unknown part of the file / parse/ feedback system.php. The manipulation of the person argument leads...

7.5CVSS6.2AI score0.00543EPSS
SaveExploits1References17
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•16 views

PT-2025-32541 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A stack-based buffer overflow exists in the parse line function within the parser.c file. The issue is locally exploitable and has been publicly disclosed. Recommendations: At the moment,...

5.3CVSS6.1AI score0.00288EPSS
SaveExploits1References18
vulnersOsv
vulnersOsv
•added 2024/12/31 3:18 p.m.•6 views

@servable/manifest (>=1.15.0, <=1.34.1), @servable/parse-server-engine (>=1.0.2, <=1.9.2) +4 more potentially affected by CVE-2024-56198 via path-sanitizer (2.0.0)

path-sanitizer NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on path-sanitizer and may be impacted: - @servable/manifest =1.15.0, =1.0.2, =1.0.0, =1.0.1, =1.0.2, =1.0.3 - generator-servable 1.14.0 Source cves: CVE-2024-56198 Source...

9.3CVSS8.5AI score0.00743EPSS
SaveExploits0
Rows per page
Query Builder