Lucene search
K

34 matches found

Circl
Circl
added 2026/04/14 3:49 p.m.0 views

CVE-2026-27919

creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 17:55:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116404344289228337 2026-04-14 20:09:15+00:00| seen|...

7.8CVSS4.8AI score0.00057EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/24 9:15 a.m.5 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.6AI score0.01584EPSS
Exploits1References1
NVD
NVD
added 2026/01/23 4:16 a.m.3 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS0.01584EPSS
Exploits1References1
Circl
Circl
added 2025/11/06 5:28 p.m.2 views

CVE-2025-27919

creationtimestamp| type| source ---|---|--- 2025-11-06 17:28:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503931619214286...

8.2CVSS5.8AI score0.00063EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/11/06 12:0 a.m.4 views

CVE-2025-27919

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

0.00063EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-27919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service panic upon attempted use of the Reader.Open API for a ZIP archive in which...

5.5CVSS6.4AI score0.00132EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:25 p.m.7 views

CVE-2020-27919

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS6.9AI score0.00616EPSS
Exploits0
Circl
Circl
added 2024/04/09 8:14 a.m.0 views

CVE-2024-27919

creationtimestamp| type| source ---|---|--- 2024-04-09 08:14:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6990 2024-04-09 15:41:27+00:00| published-proof-of-concept| https://t.me/proxybar/1998 2024-04-09 21:09:22+00:00| seen| https://t.me/arpsyndicate/4424...

7.5CVSS7.3AI score0.23884EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/04/04 2:30 p.m.42 views

CVE-2024-27919 HTTP/2: memory exhaustion due to CONTINUATION frame flood

Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to the flood of CONTINUATION frames. Envoy's HTTP/2 codec does not reset a request when header map limits have been exceeded. This allows an attacker to send an...

7.5CVSS7.1AI score0.23884EPSS
Exploits1References4
OSV
OSV
added 2024/04/04 2:30 p.m.28 views

CVE-2024-27919 HTTP/2: memory exhaustion due to CONTINUATION frame flood

Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to the flood of CONTINUATION frames. Envoy's HTTP/2 codec does not reset a request when header map limits have been exceeded. This allows an attacker to send an...

7.5CVSS7.9AI score0.23884EPSS
Exploits1References7
Arista
Arista
added 2024/04/03 12:0 a.m.119 views

Security Advisory 0094

Security Advisory 0094 PDF Date: April 5, 2024 Revision | Date | Changes ---|---|--- 1.0 | April 3, 2024 | Initial release 1.1 | April 5, 2024 | Update required configuration for exploitation and mitigation Description Arista Networks is providing this security update in response to the following...

8.2CVSS8AI score0.88805EPSS
Exploits4
OSV
OSV
added 2023/08/31 12:16 p.m.0 views

BELL-CVE-2021-27919 CVE-2021-27919 does not affect BellSoft software

Bulletin has no description...

5.5CVSS5.8AI score0.00132EPSS
Exploits0References1
CVE
CVE
added 2023/05/10 12:0 a.m.50 views

CVE-2023-27919

CVE-2023-27919 describes an authentication bypass in the NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) , affecting all versions. The vulnerability allows a remote unauthenticated attacker to alter information stored in the system. The provided documents do not include a published fix or...

5.3CVSS5.2AI score0.00569EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/08 12:0 a.m.36 views

Amazon Linux 2 : golang, --advisory ALAS2-2022-1830 (ALAS-2022-1830)

The version of golang installed on the remote host is prior to 1.18.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1830 advisory. A null pointer dereference vulnerability was found in golang. When using the library's ssh server without specifying an...

7.5CVSS7.4AI score0.0018EPSS
Exploits1References8
Amazon
Amazon
added 2022/04/28 12:0 a.m.85 views

Important: golang

Issue Overview: An out of bounds read vulnerability was found in golang. When using the archive/zip standard library stdlib and an unexpected file is parsed, it can cause golang to attempt to read outside of a slice array causing a panic in the runtime. A potential attacker can use this...

9.8CVSS7.1AI score0.10629EPSS
Exploits0
Circl
Circl
added 2022/03/25 11:30 p.m.1 views

CVE-2022-27919

creationtimestamp| type| source ---|---|--- 2022-03-25 23:30:54+00:00| seen| https://t.me/cibsecurity/39577...

9.8CVSS8.7AI score0.02148EPSS
Exploits0References1
CVE
CVE
added 2022/03/25 7:55 p.m.80 views

CVE-2022-27919

CVE-2022-27919 affects Gradle Enterprise prior to 2022.1. The issue allows remote code execution when the installation process omits an initial configuration file, because the configuration enables anonymous access to administration and the API. Impact is demonstrated as remote code execution wit...

9.8CVSS9.7AI score0.02148EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/09/23 12:0 a.m.25 views

Fedora: Security Advisory for golang (FEDORA-2021-6a3024b3fd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7AI score
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/03 1:39 p.m.32 views

Security Bulletin: IBM Cloud Private is vulnerable to a Go vulnerability (CVE-2021-27919, CVE-2021-27918)

Summary IBM Cloud Private is vulnerable to a Go vulnerability Vulnerability Details CVEID: CVE-2021-27919 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in the Reader.Open API when use a ZIP archive containing files start with “../”. By persuading a victim to open a...

7.5CVSS0.9AI score0.00132EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/08/16 11:3 p.m.25 views

Security Bulletin: IBM API Connect is impacted by a vulnerability in Golang (CVE-2021-27919)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-27919 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in the Reader.Open API when use a ZIP archive containing files start with “../”. By persuading a victim to...

5.5CVSS0.8AI score0.00132EPSS
Exploits0Affected Software1
Rows per page
Query Builder