Lucene search
+L

1824 matches found

CNNVD
CNNVD
added 2026/01/19 12:0 a.m.9 views

Tugtainer security vulnerabilities

Tugtainer is an automated Docker container update application with a web interface, developed by Eugene Savin. Versions of Tugtainer prior to 1.16.1 contained security vulnerabilities. These vulnerabilities stemmed from the password authentication mechanism, which transmitted passwords via URL...

9.1CVSS5.8AI score0.00403EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/16 6:25 p.m.19 views

CVE-2025-9014

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

7.5CVSS7AI score0.00428EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/16 2:23 p.m.8 views

CVE-2026-22644

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access...

7.5CVSS7.1AI score0.00478EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/15 6:16 p.m.7 views

CVE-2025-9014

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

7.5CVSS0.00428EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/15 6:16 p.m.12 views

CVE-2025-9014

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

7.5CVSS5.8AI score0.00428EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/15 5:36 p.m.40 views

CVE-2025-9014 Null Pointer Dereference Vulnerability on TL-WR841N

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

6.3CVSS0.00428EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/15 5:36 p.m.8 views

CVE-2025-9014 Null Pointer Dereference Vulnerability on TL-WR841N

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

6.3CVSS6.7AI score0.00428EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/15 5:36 p.m.11 views

EUVD-2026-2745

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

6.3CVSS6.6AI score0.00428EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/01/15 5:36 p.m.5 views

CVE-2025-9014

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

7.5CVSS5.5AI score0.00428EPSS
SaveExploits0References5
CVE
CVE
added 2026/01/15 5:36 p.m.25 views

CVE-2025-9014

The CVE-2025-9014 entry concerns the TP-Link TL-WR841N v14 web portal. A Null Pointer Dereference in the referer header check is caused by improper input validation. The vulnerability is exploitable remotely by an unauthenticated attacker and can lead to a Denial of Service on the web portal serv...

7.5CVSS6.7AI score0.00428EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/15 1:14 p.m.5 views

CVE-2026-22644

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access...

7.5CVSS5.5AI score0.00478EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/01/15 1:14 p.m.9 views

EUVD-2026-2798

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access...

5.3CVSS6.6AI score0.00478EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.10 views

PT-2026-3084

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N...

6.3CVSS7AI score0.00428EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.10 views

PT-2026-3011

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access...

5.3CVSS7.1AI score0.00478EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.8 views

TP-Link TL-WR841N security vulnerabilities

The TP-Link TL-WR841N is a router produced by the TP-Link company. The TP-Link TL-WR841N v14 250908 and earlier versions had a security vulnerability. This vulnerability stemmed from improper validation of the referer header, which could lead to denial-of-service attacks...

7.5CVSS5.8AI score0.00428EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 12:31 p.m.10 views

CVE-2023-4294

The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link...

6.1CVSS6.9AI score0.00735EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:8 p.m.12 views

CVE-2018-18655

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting...

4.3CVSS6.8AI score0.0084EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:48 a.m.8 views

CVE-2009-4786

Multiple cross-site scripting XSS vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to 1 admin/adminconfig.php, 2 admin/adminmodules.php, 3 delete.php, 4 editlink.php, 5 submit.php, 6 submitgroups.php, 7...

4.3CVSS5.9AI score0.01624EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:5 a.m.14 views

CVE-2019-20060

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information...

7.5CVSS6.6AI score0.01446EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:0 a.m.9 views

CVE-2020-7996

htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header...

6.1CVSS5.8AI score0.01152EPSS
SaveExploits1References1
Rows per page
Query Builder