Lucene search
+L

867 matches found

CNNVD
CNNVD
added 2025/02/03 12:0 a.m.7 views

MediaTek Chipsets 代码问题漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A code issue vulnerability exists in MediaTek Chipsets, which stems from the network HW module containing an uncaught exception that could cause the system to hang...

7.5CVSS6.9AI score0.00631EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/01/28 12:47 a.m.3 views

Uncaught Exception

Overview std/crypto/x509 is a Go standard library package std/crypto/x509 Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report: Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well...

8.7CVSS6.7AI score0.00597EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/21 11:15 a.m.11 views

CVE-2024-37284

Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing th...

5.5CVSS0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.5 views

Elastic Defend 安全漏洞

Elastic Defend is an application from the Dutch company Elastic. It provides prevention, detection and response capabilities, as well as deep visibility into EPP, EDR, SIEM and security analytics. A security vulnerability exists in Elastic Defend 8.13.3 and prior versions, which stems from an...

5.5CVSS6.7AI score0.00154EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2024/11/22 8:40 p.m.18 views

smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables

Summary An attacker can send a maliciously crafted TOML to cause the parser to crash because of a stack overflow caused by a deeply nested inline structure. A similar problem occurs when attempting to stringify deeply nested objects. The library does not limit the maximum exploration depth while...

7.7AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/11/22 8:11 p.m.11 views

SurrealDB has an Uncaught Exception Sorting Tables by Random Order

Sorting table records using an ORDER BY clause with the rand function as sorting mechanism could cause a panic due to relying on a comparison function that did not implement total order. This event resulted in a panic due to a recent change in Rust 1.81. Impact A client that is authorized to run...

7.1AI score
SaveExploits0References6Affected Software2
OSV
OSV
added 2024/11/22 8:11 p.m.6 views

GHSA-M52V-24P8-654F SurrealDB has an Uncaught Exception Sorting Tables by Random Order

Sorting table records using an ORDER BY clause with the rand function as sorting mechanism could cause a panic due to relying on a comparison function that did not implement total order. This event resulted in a panic due to a recent change in Rust 1.81. Impact A client that is authorized to run...

6.5CVSS7.1AI score0.00307EPSS
SaveExploits0References6
OSV
OSV
added 2024/11/22 8:11 p.m.6 views

GHSA-JC55-246C-R88F SurrealDB has an Uncaught Exception Handling Nonexistent Role

Roles for system users are stored as generic Ident values and converted as strings and into the Role enum whenever IAM operations are to be performed that require processing the user roles. This conversion expects those identifiers to only contain the values owner, editor and viewer and will retu...

4.9CVSS6.8AI score0.00329EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/11/22 8:11 p.m.10 views

SurrealDB has an Uncaught Exception Handling Nonexistent Role

Roles for system users are stored as generic Ident values and converted as strings and into the Role enum whenever IAM operations are to be performed that require processing the user roles. This conversion expects those identifiers to only contain the values owner, editor and viewer and will retu...

6.8AI score
SaveExploits0References4Affected Software2
OSV
OSV
added 2024/11/22 8:11 p.m.8 views

GHSA-H4F5-H82V-5W4R SurrealDB has an Uncaught Exception in Function Generating Random Time

The rand::time function in SurrealQL generates a random time from an optional range of two Unix timestamps. Due to the underlying use of timestampopt from the chrono crate, this function could potentially return None in some instances, leading to a panic when unwrap was called on its result in...

6.5CVSS7.1AI score0.00307EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/21 6:15 p.m.6 views

UBUNTU-CVE-2024-53432

While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::outofrange exception in PCLPointCloud2::at. This issue could potentially be exploited to cause a denial-of-service DoS attack when processing untrusted PLY files...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits0References4
Snyk
Snyk
added 2024/11/21 5:43 p.m.8 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to an uncaught std::outofrange exception in PCLPointCloud2::at. An attacker can cause the application to crash by submitting specially crafted PLY files. Remediation There is no fixed version for pcl. References -...

8.7CVSS6.9AI score0.00684EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/13 9:15 p.m.11 views

CVE-2024-29076

Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...

6.8CVSS0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.6 views

Intel CST 安全漏洞

Intel CST is an application from Intel Corporation USA. A security vulnerability exists in Intel CST versions prior to 8.7.10803 that stems from a failure to properly catch an exception, which could result in a system denial of service...

6.8CVSS6.3AI score0.00177EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/09 6:15 a.m.1 views

DEBIAN-CVE-2023-45361

An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-intro-page MalformedTitleException is uncaught if it is not a valid title, leading to incorrect web pages...

6.1CVSS5.2AI score0.0027EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2024/10/08 10:20 p.m.17 views

SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

The error rendering code from the parser would panic when handling failed parsing of queries where the error occurred when converting an empty string to a SurrealDB value. This would be the case when casting an empty string to a record, duration or datetime, as well as potentially when parsing an...

7.7AI score
SaveExploits0References4Affected Software2
OSV
OSV
added 2024/10/08 10:20 p.m.7 views

GHSA-QJRV-V6QP-X99X SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

The error rendering code from the parser would panic when handling failed parsing of queries where the error occurred when converting an empty string to a SurrealDB value. This would be the case when casting an empty string to a record, duration or datetime, as well as potentially when parsing an...

7.1CVSS7.7AI score0.00249EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/16 12:0 a.m.8 views

Intel Raid Web Console 安全漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. A security vulnerability exists in Intel Raid Web Console that stems from the inclusion of an uncaught exception...

6.5CVSS6.2AI score0.0015EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/16 12:0 a.m.11 views

PT-2024-7678 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console software all versions Description: The issue is related to an uncaught exception in the IntelR RAID Web Console software, which may allow an authenticated user to potentially enable denial of service via local access...

6.5CVSS6.5AI score0.0015EPSS
SaveExploits0References7
NVD
NVD
added 2024/08/15 9:15 p.m.40 views

CVE-2024-43367

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...

7.5CVSS0.00597EPSS
SaveExploits0References3
Rows per page
Query Builder