20996 matches found
SUSE CVE-2025-38142
In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory access when the requested sensor is not found. findecsensorindex may return a negative value e.g. -ENOENT, but its result was used without...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
GHSA-994J-5C83-R424 string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
string-math 安全漏洞
string-math is a module function for calculating results based on arithmetic formulas by the Polish individual developer devrafalko. A security vulnerability exists in string-math version 1.2.2, which stems from improper handling of regular expressions and could lead to a regular expression denia...
PT-2025-27455 · Unknown · String-Math
Name of the Vulnerable Software and Affected Versions: string-math version 1.2.2 Description: The issue is a Regex Denial of Service ReDoS that can be exploited via a crafted input. Recommendations: For string-math version 1.2.2, consider validating and sanitizing all inputs to prevent crafted...
CVE-2025-45143
CVE-2025-45143 affects the JavaScript library string-math v1.2.2. Multiple sources consistently describe a Regex Denial of Service (ReDoS) caused by inefficient regular expression handling, exploitable via crafted input. The CVSSBase score is 7.0 (HIGH), with network attack vector, high attack co...
CVE-2025-6522
Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string...
GHSA-WR3V-9P2C-CHX7
creationtimestamp| type| source ---|---|--- 2025-06-27 16:57:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19752...
Fedora 42 : perl-String-Compare-ConstantTime (2025-ce51c124a5)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ce51c124a5 advisory. This release fixes CVE-2024-13939 leaking the length of a secret string Tenable has extracted the preceding description block directly from the Fedora securi...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the execute function in the CliRuntimeRunner.java file, which is included in a command string and may be exposed in an error message if a command is not found. An attacker can obtain sensitive credential...
[SECURITY] Fedora 41 Update: qt6-qtbase-6.8.3-2.fc41
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
SUSE CVE-2025-6428
When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected.. This vulnerability was fixed in Firefox 140...
CLSA-2025-1750785256 curl: Fix of CVE-2024-7264
CVE-2024-7264: fix out-of-bound read in GTime2str function...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An open redirect vulnerability exists in Mozilla Firefox for Android, which can be exploited by an attacker to conduct a phishing attack by opening a link to the URL specified in the query string...