Lucene search
+L

39820 matches found

osv_bit
osv_bit
•added 2026/01/26 2:47 p.m.•17 views

BIT-NODE-2025-59466

We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when asynchooks.createHook is enabled. Instead of reaching process.on'uncaughtException', the process terminates, making the crash unrecoverable. Applications that rely on...

7.5CVSS7.1AI score0.00683EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2026/01/26 1:19 p.m.•19 views

SUSE-SU-2026:0295-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion bsc1256848 - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks that bypass TLS error handling and causing...

9.1CVSS7AI score0.03962EPSS
SaveExploits2References15
NVD
NVD
•added 2026/01/26 8:16 a.m.•34 views

CVE-2026-1425

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS0.00401EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/01/26 8:16 a.m.•59 views

UBUNTU-CVE-2026-1425

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS5.1AI score0.00401EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/26 7:32 a.m.•16 views

CVE-2026-1425

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS5.1AI score0.00401EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/01/26 7:32 a.m.•34 views

EUVD-2026-4706

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS5.1AI score0.00401EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/26 7:32 a.m.•73 views

CVE-2026-1425 pymumu SmartDNS SVBC Record dns.c _dns_decode_SVCB_HTTPS stack-based overflow

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS0.00401EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/01/26 7:32 a.m.•32 views

CVE-2026-1425 pymumu SmartDNS SVBC Record dns.c _dns_decode_SVCB_HTTPS stack-based overflow

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS5.2AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/01/26 7:32 a.m.•17 views

CVE-2026-1425 pymumu SmartDNS SVBC Record dns.c _dns_decode_SVCB_HTTPS stack-based overflow

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

6.3CVSS5.1AI score0.00401EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/01/26 12:00 a.m.•13 views

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•27 views

ESLint security vulnerabilities

ESLint is an open-source tool developed by ESLint that identifies and fixes issues in JavaScript code. Versions of ESLint prior to 9.26.0 contained a security vulnerability. This vulnerability stemmed from infinite recursion when serializing objects with circular references, which could lead to a...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/01/26 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-1425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file...

6.3CVSS5.4AI score0.00401EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/01/26 12:00 a.m.•14 views

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

5.5CVSS6AI score0.00199EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•30 views

SmartDNS security vulnerability

SmartDNS is a local-running DNS server developed by Nick Peng. Versions of SmartDNS prior to 47.1 contained a security vulnerability, which was caused by a stack buffer overflow in the SVBC record resolver...

6.3CVSS6.2AI score0.00401EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/01/26 12:00 a.m.•22 views

EUVD-2025-206359

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

5.5CVSS6AI score0.00199EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/01/26 12:00 a.m.•28 views

CVE-2025-50537

Removed by vendor...

5.9AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/01/26 12:00 a.m.•55 views

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

0.00199EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/26 12:00 a.m.•3 views

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

6AI score0.00199EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/26 12:00 a.m.•68 views

CVE-2025-50537

A stack overflow vulnerability exists in eslint before version 9.26.0 within the eslint/lib/shared/serialization.js component. The issue is triggered via the RuleTester.run() method, which invokes checkDuplicateTestCase() and subsequently isSerializable(). When an object with circular references ...

5.5CVSS6AI score0.00199EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•6 views

CVE-2025-50537: Uncontrolled Recursion

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits1References1
Rows per page
Query Builder