Lucene search
+L

733 matches found

Snyk
Snyk
added 2026/01/13 9:55 p.m.5 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/crypto/ecies ...

7.5CVSS6.8AI score0.00569EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/13 9:55 p.m.6 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/eth/fetcher t...

7.5CVSS6.8AI score0.00569EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/13 9:55 p.m.4 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/core/txpool t...

7.5CVSS6.8AI score0.00569EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/13 9:55 p.m.3 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/crypto/ecies ...

7.5CVSS6.8AI score0.00636EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/13 9:55 p.m.3 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/core/txpool t...

7.5CVSS6.8AI score0.00636EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/13 9:55 p.m.3 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/eth/fetcher t...

7.5CVSS6.8AI score0.00636EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/13 4:41 p.m.7 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to the unhandled TLSSocket error ECONNRESET. An attacker can cause application crash by passing malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data. Note: This issue primary affects applications...

8.7CVSS7.8AI score0.03782EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:22 a.m.12 views

CVE-2021-22406

There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

7.5CVSS6.8AI score0.00695EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:54 a.m.7 views

CVE-2025-20760

In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

7.5CVSS6.8AI score0.00257EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/06 1:46 a.m.3 views

CVE-2025-20760

In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

6.4AI score0.00257EPSS
Exploits0References1
CVE
CVE
added 2026/01/06 1:46 a.m.15 views

CVE-2025-20760

CVE-2025-20760 concerns a vulnerability in Modem where an uncaught exception allows reading uninitialized heap data, enabling remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction, and no privileges beyond network access are needed (attack ...

6.5CVSS6.4AI score0.00257EPSS
Exploits0References1Affected Software3
Cvelist
Cvelist
added 2026/01/06 1:46 a.m.31 views

CVE-2025-20760

In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

0.00257EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.4 views

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from an uncaught exception leading to the reading of uninitialized heap data, which could lead to a remote denial of service...

6.5CVSS6.7AI score0.00257EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-22696

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.28.8 Description Exiv2 is a C++ library and a command-line utility used to read, write, delete, and modify image metadata Exif, IPTC, XMP, and ICC. A flaw exists in the preview component where an integer overflow can...

8.1CVSS5.7AI score0.00367EPSS
Exploits1References59
Snyk
Snyk
added 2025/12/18 7:46 p.m.3 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the session establishment handler process. An attacker can cause the process to panic and terminate by sending a PFCP Session Establishment Request that omits the mandatory F-SEID CPF-SEID Information Element...

8.7CVSS5.6AI score0.0036EPSS
Exploits1References2
Snyk
Snyk
added 2025/12/18 7:46 p.m.2 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the session establishment handler process. An attacker can cause the process to panic and terminate by sending a PFCP Session Establishment Request that omits the mandatory F-SEID CPF-SEID Information Element...

8.7CVSS5.6AI score0.0036EPSS
Exploits1References2
Snyk
Snyk
added 2025/12/09 3:40 a.m.18 views

Uncaught Exception

Overview robrichards/xmlseclibs is a PHP library for XML Security. Affected versions of this package are vulnerable to Uncaught Exception in the form of improper handling of canonicalization failures. An attacker can bypass signature or digest validation by submitting specially crafted invalid XM...

7.5CVSS6.9AI score0.00226EPSS
Exploits1References2
Hacker One
Hacker One
added 2025/12/08 6:22 a.m.13 views

Node.js: Uncatchable "Maximum call stack size exceeded" error on Node.js via async_hooks leads to process crashes bypassing error handlers

A vulnerability was identified in Node.js error handling where "Maximum call stack size exceeded" errors became uncatchable when asynchooks.createHook was enabled. Instead of reaching process.on'uncaughtException', the process terminated, making the crash unrecoverable...

7.5CVSS5.5AI score0.00624EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/12/03 3:7 p.m.12 views

CVE-2025-20758

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

4.9CVSS6.8AI score0.0045EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/03 3:6 p.m.8 views

CVE-2025-20753

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

5.3CVSS6.8AI score0.00437EPSS
Exploits0References1
Rows per page
Query Builder