Lucene search
K

332 matches found

CNVD
CNVD
added 2025/03/27 12:0 a.m.3 views

Unspecified Vulnerability in LibreChat

LibreChat is an enhanced ChatGPT clone. LibreChat has a security vulnerability that stems from an unhandled exception that can be exploited by an attacker to cause a server crash...

7.5CVSS7AI score0.00899EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/22 11:33 a.m.3 views

CVE-2024-11172

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware checkBan is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This...

7.5CVSS6.7AI score0.00616EPSS
Exploits1References1
NVD
NVD
added 2025/03/20 10:15 a.m.3 views

CVE-2024-11172

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware checkBan is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This...

7.5CVSS0.00616EPSS
Exploits1References2
OSV
OSV
added 2025/03/20 10:15 a.m.2 views

CVE-2024-11172

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware checkBan is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This...

7.5CVSS6.9AI score
Exploits0References2
NVD
NVD
added 2025/03/20 10:15 a.m.7 views

CVE-2024-11173

An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to...

6.5CVSS0.00472EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/03/20 10:10 a.m.7 views

CVE-2024-11173 Unhandled Exception in danny-avila/librechat

An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to...

6.5CVSS0.00472EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/03/20 10:10 a.m.5 views

CVE-2024-11173 Unhandled Exception in danny-avila/librechat

An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to...

6.5CVSS6.3AI score0.00472EPSS
Exploits1References2
CVE
CVE
added 2025/03/20 10:10 a.m.46 views

CVE-2024-11173

CVE-2024-11173 affects the danny-avila/librechat project (git 600d217). An unhandled exception in API request handling can crash the server, causing a full denial of service. Exploitation requires a valid JWT, but LibreChat’s open registration allows attackers to create accounts and trigger the a...

6.5CVSS6.3AI score0.00472EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2025/03/20 10:10 a.m.41 views

CVE-2024-11172

The CVE-2024-11172 vulnerability affects danny-avila/librechat (commit a1647d7). An unauthenticated attacker can trigger a denial of service by sending a crafted payload to the server. The root cause is that the middleware checkBan is not wrapped in a try-catch, allowing an unhandled exception to...

7.5CVSS7.2AI score0.00616EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/03/20 10:10 a.m.5 views

CVE-2024-11172 Denial of Service in danny-avila/librechat

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware checkBan is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This...

7.5CVSS0.00616EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/03/20 10:10 a.m.3 views

CVE-2024-11172 Denial of Service in danny-avila/librechat

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware checkBan is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This...

7.5CVSS7.2AI score0.00616EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/03/20 10:9 a.m.4 views

CVE-2024-11169 Unhandled Exception Leading to Server Crash in danny-avila/librechat

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash...

7.5CVSS7.5AI score0.00899EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/03/20 10:9 a.m.5 views

CVE-2024-11169 Unhandled Exception Leading to Server Crash in danny-avila/librechat

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash...

7.5CVSS0.00899EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/03/20 12:0 a.m.1 views

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone. LibreChat has a security vulnerability that stems from an unhandled exception that can be exploited by an attacker to cause a server crash...

7.5CVSS6.8AI score0.00899EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/03 11:9 a.m.11 views

Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state.

Summary TLS/SSL error handling in Java typically throws an java.net.ssl.SSLException or subtypes SSLHandshakeException, SSLKeyException, SSLPeerUnverifiedException or SSLProtocolException when there is a protocol or security problem detected by the SSL subsytem, particularly during SSL handshake ...

6.5CVSS6.6AI score0.00169EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/12/09 12:0 a.m.13 views

RHEL 8 : firefox (RHSA-2024:10880)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10880 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

8.8CVSS7.4AI score0.00167EPSS
Exploits0References14
RedHat Linux
RedHat Linux
added 2024/12/05 11:18 a.m.18 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS6.8AI score0.00167EPSS
Exploits0References7
Cvelist
Cvelist
added 2024/12/04 11:40 a.m.17 views

CVE-2024-8894 Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a...

8.1CVSS0.0007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/04 11:40 a.m.7 views

CVE-2024-8894 Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a...

8.1CVSS7.5AI score0.0007EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/12/03 2:5 p.m.1 views

firefox: thunderbird: Unhandled Exception in Add-on Signature Verification

The Mozilla Foundation's Security Advisory: The application can fail to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw is triggered by an invalid or unsupported extension manifest and could cause runtime errors that disrupt the...

5.4CVSS7.2AI score0.00056EPSS
Exploits0References9
Rows per page
Query Builder