Lucene search
+L

790 matches found

OSV
OSV
added 2026/03/05 12:00 a.m.13 views

CVE-2025-69534

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown...

7.5CVSS5.8AI score
SaveExploits0References22
AlpineLinux
AlpineLinux
added 2026/03/05 12:00 a.m.27 views

CVE-2025-69534

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown...

8.2CVSS5.8AI score0.00566EPSS
SaveExploits1References20
Snyk
Snyk
added 2026/03/04 11:24 p.m.21 views

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the default exception handling process. An attacker can obtain sensitive internal exception messages by triggering an unhandled exception, causing the server to include the exception message in the EXCEPTIONWHAT...

6.9CVSS5.8AI score0.003EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/20 11:16 p.m.12 views

CVE-2019-25434

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters 5000 bytes or more in the name field during registration to...

7.5CVSS5.8AI score0.00315EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.19 views

Nsasoft SpotAuditor 安全漏洞

Nsasoft SpotAuditor is a advanced password recovery software developed by the US company Nsasoft. It is designed to restore passwords that have been lost or forgotten from over 40 popular Windows programs and tools. Nsasoft SpotAuditor 5.3.1.0 version contains a security vulnerability caused by...

7.5CVSS5.8AI score0.00315EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.15 views

PT-2026-21311

Name of the Vulnerable Software and Affected Versions SpotAuditor version 5.3.1.0 Description The application is susceptible to a denial of service condition. Unauthenticated attackers can cause the application to crash by providing an excessive amount of data—5000 bytes or more—in the registrati...

7.5CVSS5.8AI score0.00315EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2026/02/17 9:33 a.m.10 views

nodejs: Nodejs denial of service

A denial of service flaw has been discovered in NodeJS. A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of...

7.5CVSS5.8AI score0.04021EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/02/17 9:33 a.m.7 views

nodejs: Nodejs denial of service

A denial of service flaw has been discovered in NodeJS. A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of...

7.5CVSS5.8AI score0.04021EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/02/17 9:32 a.m.16 views

nodejs: Nodejs denial of service

A denial of service flaw has been discovered in NodeJS. A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of...

7.5CVSS5.8AI score0.04021EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/02/10 5:01 p.m.5 views

CVE-2026-25577 Emmett has an Unhandled CookieError Exception Causing Denial of Service

Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmettcore.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause...

7.5CVSS5.6AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.21 views

AVEVA PI Data Archive PI Server 安全漏洞

AVEVA PI Data Archive PI Server is a database engine developed by the British company AVEVA. There is a security vulnerability present in AVEVA PI Data Archive PI Server. This vulnerability stems from unhandled exceptions, which could allow unauthorized attackers to remotely crash core services a...

8.7CVSS5.8AI score0.00295EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.15 views

Intel Ethernet Controller E810 安全漏洞

The Intel Ethernet Controller E810 is a series of network controllers developed by the American company Intel. Versions of the Intel Ethernet Controller E810 that do not have the latest firmware 1.7.8.x contain security vulnerabilities. These vulnerabilities stem from unhandled exceptions, which...

6.7CVSS5.9AI score0.00118EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/02/05 4:03 p.m.12 views

nodejs: Nodejs denial of service

A denial of service flaw has been discovered in NodeJS. A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of...

7.5CVSS5.8AI score0.04021EPSS
SaveExploits0References5
OSV
OSV
added 2026/02/02 9:15 a.m.9 views

CVE-2026-20419

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 /...

6.5CVSS5.9AI score0.00729EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/02 8:16 a.m.45 views

CVE-2026-20419

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 /...

0.00729EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/22 8:22 p.m.22 views

CVE-2025-68139

EVerest is an EV charging software stack. In all versions up to and including 2025.12.1, the default value for terminateconnectiononfailedresponse is False, which leaves the responsibility for session and connection termination to the EV. In this configuration, any errors encountered by the modul...

4.3CVSS5.2AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:17 p.m.41 views

CVE-2026-23762 VB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCache

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

6.9CVSS0.00205EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.21 views

PT-2026-3952

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

6.9CVSS5.5AI score0.00205EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/01/20 9:16 p.m.17 views

CVE-2025-59465

A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...

7.5CVSS7.3AI score0.04021EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/01/20 8:41 p.m.13 views

CVE-2025-59465

A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...

7.5CVSS8AI score0.04021EPSS
SaveExploits0
Rows per page
Query Builder