Lucene search
+L

57 matches found

NVD
NVD
•added 2026/11/11 6:19 p.m.•15 views

CVE-2026-62971

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

7.2CVSS0.00425EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/11/11 5:27 p.m.•6 views

CVE-2026-62971 OWASP CRS: XML Attribute Value Bypass

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

7.2CVSS5.7AI score0.00425EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/11/11 5:27 p.m.•9 views

EUVD-2026-123614

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

7.2CVSS5.7AI score0.00425EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/11 12:00 a.m.•8 views

CVE-2026-62971: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

7.2CVSS5.8AI score0.00425EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/11 12:00 a.m.•7 views

PT-2026-145302

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

7.2CVSS5.8AI score0.00425EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•5 views

Malicious code in elf-stats-candystriped-ornament-933 (npm)

Source: amazon-inspector 144c219fc06e03fdff585769076f3258d85740cc5b5d49d1a9b0dd51682b2d31 The package elf-stats-candystriped-ornament-933 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/14 11:15 a.m.•6 views

Malicious code in @zalastax/nolb-illust-933 (npm)

The package @zalastax/nolb-illust-933 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
osv_mal
osv_mal
•added 2026/08/14 10:53 a.m.•28 views

MAL-2026-14079 Malicious code in elf-stats-cranberry-wishlist-933 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fcbc300aedf740c98f076d87915e27c394b15951161ba52fb5a0583b9585770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.5AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/08/14 10:53 a.m.•7 views

Malware in elf-stats-cranberry-wishlist-933

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•17 views

MiracleLinux 7 : openssl-1.0.1e-51.el7.1 (AXSA:2015-933:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-933:02 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries...

7.5CVSS7.3AI score0.44016EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/03 7:22 p.m.•13 views

Malicious code in elf-stats-candystriped-ornament-933 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144c219fc06e03fdff585769076f3258d85740cc5b5d49d1a9b0dd51682b2d31 The package elf-stats-candystriped-ornament-933 was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/12/03 7:22 p.m.•19 views

MAL-2025-192272 Malicious code in elf-stats-candystriped-ornament-933 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144c219fc06e03fdff585769076f3258d85740cc5b5d49d1a9b0dd51682b2d31 The package elf-stats-candystriped-ornament-933 was found to contain malicious code...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2017-7944

Malware in sbrugna...

6.1CVSS6.3AI score0.01019EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-9423

Malware in sbrugna...

9.8CVSS7.8AI score0.05504EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2017-14586

Malware in sbrugna...

9.8CVSS7.8AI score0.05504EPSS
SaveExploits0References15
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in @zalastax/nolb-illust-933 (npm)

The package @zalastax/nolb-illust-933 was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-12010 Malicious code in @zalastax/nolb-illust-933 (npm)

The package @zalastax/nolb-illust-933 was found to contain malicious code...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•27 views

RHEL 5 : tcpdump (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - tcpdump: SMB data printing mishandled CVE-2018-10105 - The AH parser in tcpdump before 4.9.0 has a buffer...

7.7AI score0.06816EPSS
SaveExploits3References158
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•31 views

RHEL 6 : tcpdump (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - tcpdump: SMB data printing mishandled CVE-2018-10105 - The AH parser in tcpdump before 4.9.0 has a buffer...

7.8AI score0.06816EPSS
SaveExploits3References162
SUSE CVE
SUSE CVE
•added 2023/02/15 4:57 a.m.•15 views

SUSE CVE-2016-8575

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2017-5482...

9.8CVSS8AI score0.05504EPSS
SaveExploits0References4
Rows per page
Query Builder