Lucene search
K

13 matches found

Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.6 views

PT-2026-41132

An internal regex in the Svelte runtime can take exponential time to test in . You are only vulnerable to this if you allow tags of unconstrained length. If your application only allows a predetermined list of tags or trims their length before passing them to svelte:element, you are safe...

5.9CVSS5.8AI score
Exploits0References5
Packet Storm News
Packet Storm News
added 2026/05/06 12:0 a.m.9 views

AoI-Guided Client Selection for Robust and Timely Federated Intrusion Detection in Cloud-Edge Security Analytics

Federated learning FL is attractive for cloud-edge intrusion detection because it enables collaborative training over distributed telemetry without centralizing raw logs. In production security analytics pipelines, however, only a subset of clients participates in each round, and heterogeneous...

5.8AI score
Exploits0
OSV
OSV
added 2026/03/21 1:17 a.m.2 views

CVE-2026-32065

OpenClaw versions prior to 2026.2.25 contain an approval-integrity bypass vulnerability in system.run where rendered command text is used as approval identity while trimming argv token whitespace, but runtime execution uses raw argv. An attacker can craft a trailing-space executable token to...

4.8CVSS6.2AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.2 views

PT-2026-26742

OpenClaw versions prior to 2026.2.25 contain an approval-integrity bypass vulnerability in system.run where rendered command text is used as approval identity while trimming argv token whitespace, but runtime execution uses raw argv. An attacker can craft a trailing-space executable token to...

5.7CVSS6.1AI score0.00049EPSS
Exploits0References4
Fedora
Fedora
added 2024/03/07 10:33 p.m.22 views

[SECURITY] Fedora 40 Update: t-digest-3.2-8.fc40

A new data structure for accurate on-line accumulation of rank-based statisti cs eg. quantiles and trimmed means. The t-digest algorithm is also very parallel friendly making it useful in map-reduce and parallel streaming applications...

8.8CVSS9.1AI score0.45835EPSS
Exploits3
OSV
OSV
added 2024/02/16 2:15 a.m.0 views

CVE-2023-40093

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/16 12:8 a.m.12 views

CVE-2023-40093

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00055EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/02/15 12:0 a.m.3 views

PT-2024-12841 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code that could lead to local information disclosure. In multiple files, there is a possible way that trimm...

5.5CVSS6.6AI score0.00055EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 5:1 a.m.1 views

SUSE CVE-2016-5129

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code...

8.8CVSS9.5AI score0.02501EPSS
Exploits0References7
OSV
OSV
added 2016/07/23 7:59 p.m.2 views

ALPINE-CVE-2016-5129

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code...

8.8CVSS9.4AI score0.02501EPSS
Exploits0References1
OSV
OSV
added 2016/07/23 12:0 a.m.0 views

UBUNTU-CVE-2016-5129

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code...

8.8CVSS7.4AI score0.02501EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2014/12/15 12:0 a.m.30 views

Fedora 20 : erlang-R16B-03.10.fc20 (2014-16214)

Disable SSLv3 - Backport useful os:getenv/2 from master. See this GitHub pull request for further details - https://github.com/erlang/otp/pull/535 - Fixed CVE-2014-1693 backported fix from ver. 17.x.x, see patch no. 17 - Trimmed dependency chain Note that Tenable Network Security has extracted...

7.5CVSS8.2AI score0.00588EPSS
Exploits1References4
Cvelist
Cvelist
added 2007/10/17 11:0 p.m.17 views

CVE-2007-5513

The XML DB XMLDB component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which 1 long usernames are trimmed to 5 characters, or 2 short entries contain any extra characters from usernames in previous entries, aka DB23...

6.2AI score0.01632EPSS
Exploits0References12
Rows per page
Query Builder