Lucene search
+L

734 matches found

Github Security Blog
Github Security Blog
added 2024/10/08 10:20 p.m.13 views

SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

The error rendering code from the parser would panic when handling failed parsing of queries where the error occurred when converting an empty string to a SurrealDB value. This would be the case when casting an empty string to a record, duration or datetime, as well as potentially when parsing an...

7.7AI score
SaveExploits0References4Affected Software2
OSV
OSV
added 2024/10/08 10:20 p.m.5 views

GHSA-QJRV-V6QP-X99X SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

The error rendering code from the parser would panic when handling failed parsing of queries where the error occurred when converting an empty string to a SurrealDB value. This would be the case when casting an empty string to a record, duration or datetime, as well as potentially when parsing an...

7.1CVSS7.7AI score0.00249EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/16 12:0 a.m.4 views

Intel Raid Web Console 安全漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. A security vulnerability exists in Intel Raid Web Console that stems from the inclusion of an uncaught exception...

6.5CVSS6.2AI score0.0015EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/15 9:15 p.m.39 views

CVE-2024-43367

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...

7.5CVSS0.00597EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/15 8:38 p.m.46 views

CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...

7.5CVSS0.00597EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/08/15 8:38 p.m.15 views

CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...

7.5CVSS7.4AI score0.00597EPSS
SaveExploits0References3
OSV
OSV
added 2024/08/15 8:38 p.m.28 views

CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...

7.5CVSS6.9AI score0.00597EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/08/14 8:49 p.m.26 views

Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...

7.5CVSS7AI score0.00597EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2024/08/14 8:49 p.m.24 views

GHSA-F67Q-WR6W-23JQ Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...

7.5CVSS8.7AI score0.00601EPSS
SaveExploits0References6
RustSec
RustSec
added 2024/08/14 12:0 p.m.8 views

Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`

A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...

8.6CVSS7.2AI score0.00601EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/08/14 12:0 p.m.4 views

RUSTSEC-2024-0444 Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`

A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...

8.6CVSS7AI score0.00601EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/08/14 12:0 a.m.5 views

PT-2024-12501 · Unknown · Openbmc Firmware

Name of the Vulnerable Software and Affected Versions: OpenBMC Firmware versions prior to egs-1.14-0 OpenBMC Firmware versions prior to bhs-0.27 Description: The issue is related to an uncaught exception in OpenBMC Firmware for some IntelR Server Platforms, which may allow an authenticated user t...

5.9CVSS7AI score0.00443EPSS
SaveExploits0References3
Amazon
Amazon
added 2024/07/22 12:0 a.m.12 views

Important: ecs-service-connect-agent

Issue Overview: dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws a...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0
NVD
NVD
added 2024/06/28 10:15 p.m.38 views

CVE-2024-38525

dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...

7.5CVSS0.00431EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/28 9:10 p.m.10 views

CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash

dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...

7.5CVSS6.6AI score0.00431EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/28 12:0 a.m.11 views

PT-2024-28052 · Unknown · Nlohmann/Json +1

Name of the Vulnerable Software and Affected Versions: dd-trace-cpp versions prior to 0.2.2 Description: The issue occurs when the library fails to extract trace context due to malformed unicode. It attempts to log the list of audited headers and their values using the nlohmann JSON library...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2024/06/20 6:20 a.m.33 views

CVE-2024-38355

A vulnerability was found in Socket.IO where a specially crafted packet can trigger an uncaught exception on the server, causing the Node.js process to crash. When the server receives this malformed packet, it results in an unhandled error event that stops the Socket.IO server from functioning...

7.3CVSS7AI score0.0069EPSS
SaveExploits0References4
Veracode
Veracode
added 2024/06/20 5:58 a.m.25 views

Denial Of Service (DoS)

socket.io is vulnerable to Denial Of Service DoS. The vulnerability is due to a specially crafted Socket.IO packet triggering an uncaught exception, which kills the Node.js process, allowing an attacker to crash the server by sending a malicious packet...

7.3CVSS6.6AI score0.0069EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/06/19 8:15 p.m.46 views

CVE-2024-38355

Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. This issue is fixed by commit 15af22fc22 which has been included in...

7.3CVSS0.0069EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/19 12:0 a.m.6 views

Socket.IO Security Vulnerability

Socket.IO is a JavaScript library for real-time web applications from Socket.IO. A security vulnerability exists in Socket.IO that stems from a specially crafted Socket.IO packet that could trigger an uncaught exception on the server, terminating the Node.js process...

7.3CVSS6.8AI score0.0069EPSS
SaveExploits0References7
Rows per page
Query Builder