Lucene search
+L

14343 matches found

Positive Technologies
Positive Technologies
•added 2025/07/18 12:00 a.m.•12 views

PT-2025-43676

Name of the Vulnerable Software and Affected Versions Wasmtime versions 38.0.0 through 38.0.2 Description Wasmtime is a runtime for WebAssembly. Versions from 38.0.0 through 38.0.2 contain a flaw in the implementation of component-model related host-to-wasm trampolines. Specifically, a carefully...

3.1CVSS6.6AI score0.00428EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
•added 2025/07/17 12:50 a.m.•31 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS7.3AI score0.00603EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
•added 2025/07/17 12:00 a.m.•24 views

Enterprise Security Incident Analysis and Countermeasures Based on the T-Mobile Data Breach

This paper presents a comprehensive analysis of T-Mobile's critical data breaches in 2021 and 2023, alongside a full-spectrum security audit targeting its systems, infrastructure, and publicly exposed endpoints. By combining case-based vulnerability assessments with active ethical hacking...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/07/17 12:00 a.m.•18 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves security segmentation flaws. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to information...

5.5CVSS7.1AI score0.00234EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/17 12:00 a.m.•17 views

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a hacker to gain access to read, modify, and delete information.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to deficiencies in security segmentation. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...

5.5CVSS7.2AI score0.00209EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/07/17 12:00 a.m.•12 views

SUSE SLES15 Security Update : gnuplot (SUSE-SU-2025:01811-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01811-2 advisory. - CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. - CVE-2025-31177: improper bounds check lea...

6.2CVSS6.3AI score0.00207EPSS
SaveExploits0References22
osv-suse
osv-suse
•added 2025/07/16 2:52 p.m.•15 views

SUSE-SU-2025:01835-2 Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.9a - CVE-2025-31162: Fixed a floating point exception in fig2dev in getslope function bsc1240380. - CVE-2025-31163: Fixed a segmentation fault in fig2dev in putpatternarc function bsc1240381. - CVE-2025-31164: Fixe...

7.8CVSS6AI score0.00305EPSS
SaveExploits7References17
osv-suse
osv-suse
•added 2025/07/16 2:49 p.m.•10 views

SUSE-SU-2025:01811-2 Security update for gnuplot

This update for gnuplot fixes the following issues: - CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. - CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8copyone bsc1240326. - CVE-2025-31178: unvalidated user input leads to segmentatio...

6.2CVSS5.8AI score0.00207EPSS
SaveExploits0References15
SUSE Linux
SUSE Linux
•added 2025/07/16 2:49 p.m.•16 views

Security update for gnuplot

This update for gnuplot fixes the following issues: CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8copyone bsc1240326. CVE-2025-31178: unvalidated user input leads to segmentation faul...

6.9CVSS7.4AI score0.00207EPSS
SaveExploits0References28
RedhatCVE
RedhatCVE
•added 2025/07/16 12:16 a.m.•26 views

CVE-2024-42646

A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service DoS via crafted messages...

7.5CVSS6.4AI score0.0047EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/15 4:15 p.m.•16 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS0.00603EPSS
SaveExploits1References3
Mend
Mend
•added 2025/07/15 12:00 a.m.•5 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

8.7CVSS0.00603EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/15 12:00 a.m.•9 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

6.7AI score0.00603EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/15 12:00 a.m.•7 views

CVE-2024-42650: Undefined Security Weakness

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS5.8AI score0.00603EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2025/07/15 12:00 a.m.•16 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS6.5AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2025/07/15 12:00 a.m.•17 views

NanoMQ 安全漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open sourced by EMQ USA. A security vulnerability exists in NanoMQ version 0.17.5, which stems from a segmentation error in the component /nanomq/pubhandler.c that could lead to a denial of service attack...

7.5CVSS6.5AI score0.00603EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/15 12:00 a.m.•55 views

CVE-2024-42650

The lightweight MQTT broker NanoMQ version 0.17.5 is susceptible to a segmentation fault within the /nanomq/pub_handler.c component. An attacker can exploit this vulnerability by sending a crafted PUBLISH message , resulting in a Denial of Service (DoS) . No information regarding a patched versio...

7.5CVSS7.2AI score0.00603EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•22 views

PT-2025-29575 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.5 Description: NanoMQ version 0.17.5 contains a segmentation fault in the /nanomq/pub handler.c component. Attackers can exploit this issue by sending a crafted PUBLISH message, leading to a Denial of Service DoS...

7.5CVSS6.1AI score0.00603EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2025/07/14 11:35 p.m.•2 views

Malware in @segmentation/gf2fov

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/07/14 5:15 p.m.•16 views

CVE-2024-42646

A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service DoS via crafted messages...

7.5CVSS0.0047EPSS
SaveExploits1References2
Rows per page
Query Builder