Lucene search
K

32 matches found

Cvelist
Cvelist
added 3 days ago31 views

CVE-2026-12200 Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow

A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of the component Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack can be...

7.5CVSS0.00324EPSS
Exploits0References5
CVE
CVE
added 2026/05/08 7:44 a.m.10 views

CVE-2013-10075

The connected EUVD-2013-7294 entry confirms a vulnerability in Apache::Session for Perl (versions up to 1.94). The issue arises when re-creating deleted sessions via the File and DB_File stores, allowing a session that should have been deleted to be revived and potentially reusing data intended f...

9.1CVSS5.8AI score0.00356EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/08 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2013-10075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile...

9.1CVSS5.5AI score0.00356EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.7 views

Apache::Session::Generate::MD5 安全漏洞

Apache::Session::Generate::MD5 is a session management module provided by the Apache Foundation. Versions of Apache::Session::Generate::MD5 prior to 1.94 contained security vulnerabilities. These vulnerabilities stemmed from the recreation of deleted sessions, which could lead to the restoration ...

9.1CVSS5.8AI score0.00356EPSS
Exploits0References1
OSV
OSV
added 2026/05/06 1:16 p.m.4 views

UBUNTU-CVE-2026-5081

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...

9.1CVSS5.8AI score0.00321EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/05/06 1:16 p.m.5 views

CVE-2026-5081

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...

9.1CVSS5.8AI score0.00321EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/03/28 11:58 a.m.4 views

CVE-2016-20038

Removed by vendor...

8.6CVSS5.2AI score0.00177EPSS
Exploits0
CNNVD
CNNVD
added 2026/03/28 12:0 a.m.3 views

yTree 缓冲区错误漏洞

yTree is a terminal-based file management and directory browsing tool developed by Werner Bregulla. Versions 1.94 to 1.1 of yTree contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which could allow local attackers to execute arbitrary code by providing...

8.6CVSS6.4AI score0.00177EPSS
Exploits0References3
OSV
OSV
added 2026/03/17 12:0 a.m.2 views

OPENSUSE-SU-2026:10384-1 cargo1.94-1.94.0-2.1 on GA media

These are all security issues fixed in the cargo1.94-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS5.8AI score0.0047EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.5 views

Apache::Session::Generate::MD5 安全漏洞

Apache::Session::Generate::MD5 is a session management module provided by the Apache Foundation. Versions of Apache::Session::Generate::MD5 prior to 1.94 contained security vulnerabilities. These vulnerabilities stemmed from the use of insecure random number generators for generating session IDs,...

9.1CVSS5.8AI score0.00583EPSS
Exploits0References11
OSV
OSV
added 2026/01/22 3:52 a.m.4 views

CVE-2026-24042 Appsmith public apps can execute unpublished actions (viewMode confusion)

Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users to execute unpublished edit-mode actions by sending viewMode=false or omitting it to POST /api/v1/actions/execute. This bypasses the...

9.4CVSS5.9AI score0.00579EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.5 views

PT-2026-3916

Name of the Vulnerable Software and Affected Versions Appsmith versions 1.94 and below Description Appsmith is a platform used to build admin panels, internal tools, and dashboards. Publicly accessible applications in affected versions allow unauthenticated users to execute unpublished actions...

9.4CVSS5.7AI score0.00579EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-45129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impac...

4.9CVSS5.2AI score0.01166EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/05 12:0 a.m.9 views

WordPress Advanced Woo Labels Plugin <= 1.93 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Woo Labels Type Plugin Vulnerable versions = 1.93 Fixed in 1.94 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35675 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0ad89d9224a2 Credits savphill Required privilege...

6.5CVSS6.6AI score0.00254EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/22 12:0 a.m.4 views

Ritlabs TinyWeb Server 安全漏洞

Ritlabs TinyWeb Server is a small but full-featured Web server from Ritlabs. A security vulnerability exists in Ritlabs TinyWeb Server version 1.94, which stems from the fact that incorrect manipulation of the input %0D%0A can lead to crlf injection...

6.9CVSS5.5AI score0.00669EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.2 views

TinyWeb Security Vulnerability

TinyWeb is a simple and lightweight HTTP server from the individual developer Konstantin Belyalov. A security vulnerability exists in TinyWeb version 1.94 and earlier, which originates from a denial of service that allows an unauthenticated, remote attacker to send too large an element in a reque...

8.6CVSS6.7AI score0.01226EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/10/20 1:6 a.m.5 views

SUSE CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

7.8CVSS6.9AI score0.00346EPSS
Exploits1References4
NVD
NVD
added 2023/10/18 4:15 p.m.8 views

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

7.8CVSS7.5AI score0.00346EPSS
Exploits1References4
OSV
OSV
added 2023/10/18 4:15 p.m.2 views

DEBIAN-CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

7.8CVSS8.2AI score0.00346EPSS
Exploits1References1
OSV
OSV
added 2023/10/18 4:15 p.m.17 views

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

7.8CVSS7.1AI score
Exploits0References4
Rows per page
Query Builder