Lucene search
K

51 matches found

Circl
Circl
added 2026/03/20 11:1 p.m.3 views

CVE-2026-33037

creationtimestamp| type| source ---|---|--- 2026-03-20 23:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmopgk4k2c 2026-03-20 23:04:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmu4qtlm2t 2026-03-23 23:40:09+00:00| seen|...

8.1CVSS5.8AI score0.00672EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-33037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstance...

5.3CVSS6.8AI score0.75353EPSS
Exploits1References2
OSV
OSV
added 2025/08/14 6:52 p.m.0 views

MAL-2025-33037 Malicious code in sfrewe23 (npm)

The package sfrewe23 was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 6:46 a.m.9 views

CVE-2024-33037

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesnt validate the IPC message received from the firmware...

6.1CVSS6.9AI score0.00098EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 10:18 a.m.14 views

CVE-2024-33037 Buffer Over-read in Neural Processing Unit

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesnt validate the IPC message received from the firmware...

6.1CVSS6.8AI score0.00098EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/02 10:18 a.m.22 views

CVE-2024-33037 Buffer Over-read in Neural Processing Unit

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesnt validate the IPC message received from the firmware...

6.1CVSS0.00098EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/02/06 12:0 a.m.51 views

Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-011)

The version of tomcat installed on the remote host is prior to 9.0.50-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT9-2024-011 advisory. 2024-02-15: CVE-2021-33037 was added to this advisory. Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5...

5.3CVSS7.3AI score0.75353EPSS
Exploits4References6
CVE
CVE
added 2024/01/02 5:38 a.m.82 views

CVE-2023-33037

CVE-2023-33037 affects Qualcomm closed‑source components in automotive cryptography, described as a cryptographic issue when unwrapping the key secs2d and verifying RPMB data. Public metrics indicate high impact to confidentiality and/or integrity in some records, with a local attack vector and l...

7.1CVSS5.5AI score0.00087EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:0 a.m.20 views

Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-007)

The version of tomcat installed on the remote host is prior to 9.0.50-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2TOMCAT9-2023-007 advisory. Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding...

5.3CVSS7.3AI score0.75353EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:0 a.m.34 views

Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-007)

The version of tomcat installed on the remote host is prior to 8.5.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT8.5-2023-007 advisory. A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid...

6.5CVSS7.4AI score0.75353EPSS
Exploits1References6
Amazon
Amazon
added 2023/09/25 12:0 a.m.4 views

Medium: tomcat

Issue Overview: Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly...

5.3CVSS7AI score0.75353EPSS
Exploits1
Amazon
Amazon
added 2023/03/22 12:0 a.m.8 views

Medium: tomcat9

Issue Overview: Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly...

7CVSS6.6AI score0.75353EPSS
Exploits16
F5 Networks
F5 Networks
added 2023/02/21 6:35 p.m.55 views

K32469285: Apache Tomcat vulnerability CVE-2021-33037

Security Advisory Description Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat...

5.3CVSS7.9AI score0.75353EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/07 4:30 p.m.26 views

Security Bulletin: IBM Rational Build Forge is affected by Apache Tomcat version used in it. (CVE-2021-33037)

Summary IBM Rational Build Forge is affected by CVE-2021-33037. Vulnerability Details CVEID: CVE-2021-33037 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially-crafted HTTPS...

5.3CVSS0.4AI score0.75353EPSS
Exploits1Affected Software1
Circl
Circl
added 2022/06/29 5:23 p.m.8 views

CVE-2022-33037

creationtimestamp| type| source ---|---|--- 2022-06-29 17:23:25+00:00| seen| https://t.me/cibsecurity/45358...

7.8CVSS7.5AI score0.00366EPSS
Exploits1References1
OSV
OSV
added 2022/06/29 1:15 p.m.2 views

CVE-2022-33037

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...

7.8CVSS6.1AI score0.00366EPSS
Exploits1References1
CVE
CVE
added 2022/06/29 12:25 p.m.90 views

CVE-2022-33037

CVE-2022-33037 affects Orwell-Dev-Cpp v5.11, where a binary hijack allows an attacker to execute arbitrary code by processing a crafted .exe file. The vulnerability is documented across multiple sources (e.g., NVD, Red Hat, CNVD) with the described impact being code execution on local access. The...

7.8CVSS7.7AI score0.00366EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2022/04/01 12:0 a.m.28 views

Ubuntu: Security Advisory (USN-5360-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.75353EPSS
Exploits16References3
Atlassian
Atlassian
added 2022/03/10 4:57 a.m.59 views

Tomcat versions bundled with the Crowd product are vulnerable to CVE-2021-33037

The different Tomcat versions 8.5.X bundled to the Atlassian Crowd product versions lower than Crowd 4.4.1 are vulnerable to CVE-2021-33037|https://vulners.com/cve/CVE-2021-33037 The Tomcat versions from 8.5.0 to 8.5.66 are affected by the mentioned...

5.3CVSS6AI score0.75353EPSS
Exploits1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/09 4:28 p.m.23 views

Security Bulletin: IBM UrbanCode Build is affected by CVE-2021-33037

Summary IBM UrbanCode Build is affected by CVE-2021-33037 Vulnerability Details CVEID: CVE-2021-33037 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially-crafted HTTPS transfer-encoding...

5.3CVSS5.6AI score0.75353EPSS
Exploits1Affected Software1
Rows per page
Query Builder