Lucene search
K

57 matches found

NVD
NVD
added 2025/02/21 8:15 a.m.8 views

CVE-2025-0726

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users ca...

7.5CVSS0.00411EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/14 7:35 p.m.10 views

CVE-2025-25289 @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

@octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long...

5.3CVSS0.00068EPSS
Exploits0References3
CVE
CVE
added 2025/02/14 7:35 p.m.272 views

CVE-2025-25289

CVE-2025-25289 describes a ReDoS vulnerability in the octokit request-error handling. Prior to v6.1.7, an authorization header containing a long sequence of spaces followed by a newline and “@” could cause exponential regular-expression processing, leading to high resource consumption and potenti...

5.3CVSS6.9AI score0.00068EPSS
Exploits0References3
OSV
OSV
added 2025/02/14 7:35 p.m.5 views

CVE-2025-25289 @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

@octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long...

5.3CVSS6.5AI score0.00068EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/02/14 7:35 p.m.9 views

CVE-2025-25289 @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

@octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long...

5.3CVSS6.9AI score0.00068EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2025/02/14 5:58 p.m.2 views

@zendeskgarden/scripts (>=2.1.0 <=2.4.3) potentially affected by CVE-2025-25289 via @octokit/request-error (>=6.1.1 <=6.1.4)

@octokit/request-error NPM version =6.1.1, =2.1.0, =2.4.3 Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

5.3CVSS6.5AI score0.00068EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2025/02/14 5:58 p.m.4 views

-temp-electron-manager-somiibo (=0.0.200), 0z_export (>=1.0.0 <=1.0.102) +10017 more potentially affected by CVE-2025-25289 via @octokit/request-error (>=1.2.1 <=5.1.0)

@octokit/request-error NPM version =1.2.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

5.3CVSS6.4AI score0.00068EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/02/14 12:0 a.m.2 views

PT-2025-7072 · Npm · @Octokit/Request-Error

Name of the Vulnerable Software and Affected Versions: @octokit/request-error versions 1.0.0 through 6.1.6 Description: A Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long...

5.3CVSS7.8AI score0.00068EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2024/11/14 9:5 a.m.11 views

CVE-2024-50141

In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFIMEMORYRUNTIME block for PRM handler and context PRMT needs to find the correct type of block to translate the PA-VA mapping for EFI runtime services. The issue arises because the PRMT is finding a block of type...

5.5CVSS6.9AI score0.00013EPSS
Exploits0References4
OSV
OSV
added 2024/11/07 10:15 a.m.4 views

UBUNTU-CVE-2024-50141

In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFIMEMORYRUNTIME block for PRM handler and context PRMT needs to find the correct type of block to translate the PA-VA mapping for EFI runtime services. The issue arises because the PRMT is finding a block of type...

5.5CVSS6.2AI score0.00013EPSS
Exploits0References33
OSV
OSV
added 2024/04/28 1:0 p.m.29 views

CVE-2022-48645 net: enetc: deny offload of tc-based TSN features on VF interfaces

In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC taprio, cbs, gate, police are configured through a mix of command BD ring messages and port registers: enetcportrd, enetcportwr. Port...

5.5CVSS6.1AI score0.00015EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2024/03/18 10:7 a.m.17 views

CVE-2023-52613

In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2thermal: Fix incorrect PTRERR judgment PTRERR returns -ENODEV when thermal-zones are undefined, and we need -ENODEV as the right value for comparison. Otherwise, tz-type is NULL when thermal-zones is...

5.5CVSS4.7AI score0.00018EPSS
Exploits0
Citrix
Citrix
added 2023/12/17 12:0 a.m.4 views

Can't sign in to workspaces with SAML using custom domains

Can't sign in to workspaces with SAML using custom domains, When try to access the custom domain URL get the error "Unable to Process Your Request, There was an unexpected error"...

7AI score
Exploits0
CNNVD
CNNVD
added 2023/09/15 12:0 a.m.3 views

Eclipse Jetty Security Vulnerability

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty that originates from rejecting a request and returning a 400 response...

5.3CVSS6.8AI score0.04575EPSS
Exploits0References12
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.3 views

SUSE CVE-2012-0053

protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request aka 400 error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a 1 long or 2 malformed header in...

4.3CVSS8.8AI score0.23641EPSS
Exploits4References6
Vulnrichment
Vulnrichment
added 2022/10/20 12:0 a.m.7 views

CVE-2022-39823

An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation points may cause a use-after-free error...

7.5AI score0.00505EPSS
Exploits0References2
CVE
CVE
added 2022/06/10 5:21 p.m.76 views

CVE-2022-31287

This CVE concerns Bento4 v1.2, where an allocation size request error exists in the file Ap4RtpAtom.cpp. The connected documents confirm the affected software/component and the underlying issue, but do not provide details on exploit methods, affected versions beyond Bento4 v1.2, or remediation st...

5.5CVSS5.5AI score0.00165EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/10 5:21 p.m.13 views

CVE-2022-31287

An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp...

5.8AI score0.00165EPSS
Exploits1References1
Citrix
Citrix
added 2022/04/26 12:0 a.m.5 views

App Layering - (400) Bad Request with ImportOsLayer.ps1

ImportOsLayer.ps1 script PS C:\windows\Setup\Scripts .\ImportOsLayer.ps1 -ElmAddress -IgnoreCertError ModuleType Version Name ExportedCommands ---------- ------- ---- ---------------- Script 0.0 DynamicModule1cbe0359-cdf4-45... New-CALOperatingSystem, New-CALSession Failed to call API at and Meth...

7.2AI score
Exploits0
Citrix
Citrix
added 2022/02/25 12:0 a.m.6 views

ELM : When we click on upgrade and try to browse we get the error : there was an error on processing web request : status code 400 (bad Request ) : Bad Request

Error : there was an error on processing web request : status code 400 bad Request : Bad Request...

7.4AI score
Exploits0
Rows per page
Query Builder