Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-10491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data i...

5.3CVSS5.8AI score0.00253EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/09 9:54 a.m.4 views

CVE-2020-10491

CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request...

4.3CVSS6.8AI score0.00147EPSS
Exploits1References1
Circl
Circl
added 2025/09/15 4:38 p.m.4 views

CVE-2025-10491

creationtimestamp| type| source ---|---|--- 2025-09-15 16:38:46+00:00| seen| https://gist.github.com/Darkcrai86/6c50919372ca0896d9498550f196a40d...

7.8CVSS4.8AI score0.00021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:47 a.m.7 views

CVE-2019-10491

ADSP can be compromised since its a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

7.8CVSS7.4AI score0.00042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/10/29 7:55 p.m.11 views

CVE-2024-10491

A flaw was found in the Express Node.js framework. In certain versions, an attacker may be able to trigger an arbitrary resource injection attack via the link header when unsanitized data is used...

5.4CVSS7.1AI score0.00253EPSS
Exploits1References4
Circl
Circl
added 2024/10/29 6:57 p.m.3 views

CVE-2024-10491

creationtimestamp| type| source ---|---|--- 2024-10-29 18:57:47+00:00| seen| https://t.me/cvedetector/9352...

5.3CVSS5.4AI score0.00253EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2024/10/29 5:15 p.m.19 views

CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

5.3CVSS6.7AI score0.00253EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/10/29 4:23 p.m.20 views

CVE-2024-10491 Preload arbitrary resources by injecting additional `Link` headers

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

4CVSS7.3AI score0.00253EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2024/10/29 4:23 p.m.23 views

CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

5.3CVSS5.8AI score0.00253EPSS
Exploits1
Cvelist
Cvelist
added 2024/10/29 4:23 p.m.16 views

CVE-2024-10491 Preload arbitrary resources by injecting additional `Link` headers

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

4CVSS0.00253EPSS
Exploits1References1
CVE
CVE
added 2020/03/12 1:5 p.m.39 views

CVE-2020-10491

The issue is a CSRF vulnerability in Chadha PHPKB Standard Multi-Language version 9, specifically affecting the endpoint admin/manage-departments.php. A crafted request can cause an attacker to add a department without proper authorization. The root cause is a CSRF weakness that allows unauthoriz...

4.3CVSS4.5AI score0.00147EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2019/11/06 5:15 p.m.12 views

CVE-2019-10491

ADSP can be compromised since its a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

7.8CVSS7.7AI score0.00042EPSS
Exploits0References1
CVE
CVE
added 2019/11/06 5:11 p.m.62 views

CVE-2019-10491

CVE-2019-10491 affects Qualcomm ADSP (Audio DSP) across a broad set of Snapdragon platforms (e.g., IPQ4019, IPQ8064, IPQ8074, MDM9150/9206/9607/9640/9650, MSM8909W/8996AU, QCS405/605, SD-series like SD 210–435/439, SD 450, 615/16/625/632/636/665/675, 712/710/670, 730, 820/820A, 835, 845/850, 855,...

7.8CVSS7.7AI score0.00042EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/05/17 3:0 p.m.48 views

CVE-2018-10491

Foxit Reader 9.0.0.29935 is affected by CVE-2018-10491 due to an out-of-bounds write in the parsing of U3D Bone Weight Modifier structures, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The vulnerability context is ...

8.8CVSS8.8AI score0.0045EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2018/04/18 2:0 p.m.46 views

CVE-2016-10491

CVE-2016-10491 is an Android vulnerability affecting devices with Qualcomm Snapdragon Mobile and related SoCs. The issue arises from an integer overflow that can overflow a buffer in a QuRT API function, potentially enabling further impact on affected devices. Public references describe impact ac...

10CVSS8.7AI score0.00222EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder