Lucene search
+L

478 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2013-3671

Malware in sbrugna...

9.8CVSS9.3AI score0.03125EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2003-1127

Malware in sbrugna...

5CVSS6.4AI score0.06757EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-2489

Malware in sbrugna...

7.5CVSS6.1AI score0.05431EPSS
SaveExploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2000-0855

Malware in sbrugna...

5CVSS6.4AI score0.44717EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-0454

Malware in sbrugna...

5CVSS6.1AI score0.01716EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2005-1369

Malware in sbrugna...

7.5CVSS6.4AI score0.06934EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2007-5596

Malware in sbrugna...

4.3CVSS6AI score0.02001EPSS
SaveExploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2000-0518

Malware in sbrugna...

5CVSS6.4AI score0.07669EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2000-0331

Malware in sbrugna...

5CVSS6.4AI score0.03257EPSS
SaveExploits2References6
Fedora
Fedora
added 2025/07/13 4:20 a.m.11 views

[SECURITY] Fedora 42 Update: php-8.4.10-1.fc42

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

7.5CVSS7.1AI score0.01EPSS
SaveExploits1
OSV
OSV
added 2025/07/10 10:47 a.m.23 views

BIT-TOMCAT-2025-46701 Apache Tomcat: Security constraint bypass for CGI scripts

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0 through 11.0.6, from 10.1.0 through...

7.3CVSS7.2AI score0.02797EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/24 1:03 a.m.52 views

CVE-2025-34037

CVE-2025-34037 is an OS command injection in Linksys E-Series routers, exploitable via unauthenticated HTTP POSTs to /tmUnblock.cgi or /hndUnblock.cgi on port 8080. The issue stems from improper sanitization of the ttcp_ip parameter, enabling shell command injection and arbitrary code execution. ...

10CVSS6.5AI score0.90882EPSS
SaveIn wildExploits2References4
Mageia
Mageia
added 2025/06/08 6:22 a.m.19 views

Updated tomcat packages fix security vulnerability

Security constraint bypass for CGI scripts. CVE-2025-46701...

7.3CVSS6.3AI score0.02797EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/05/29 7:06 p.m.139 views

CVE-2025-46701 Apache Tomcat: Security constraint bypass for CGI scripts

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1...

0.02797EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:02 a.m.16 views

CVE-2023-33274

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and...

9.8CVSS7.4AI score0.01057EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:45 p.m.21 views

CVE-2021-40380

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials...

7.5CVSS6.9AI score0.22724EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/05/22 3:14 p.m.12 views

CVE-2020-15489

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges...

10CVSS8.3AI score0.03699EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 12:06 p.m.16 views

CVE-2012-4443

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...

6.9CVSS7.1AI score0.00377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:33 a.m.12 views

CVE-2018-17879

An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system as root. There are several injection points in various scripts...

9.8CVSS7.9AI score0.2185EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:29 p.m.12 views

CVE-2002-1986

Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot "."...

5CVSS7.2AI score0.06685EPSS
SaveExploits2References1
Rows per page
Query Builder