Lucene search
+L

4988 matches found

Zero Science Lab
Zero Science Lab
added 2026/02/12 12:0 a.m.175 views

JUNG Smart Visu Server 1.1.1050 Request URL Override

Summary The Smart Visu Server makes your intelligent building control convenient. With the user-friendly operating concept, you can control both the KNX system and other systems such as Philips Hue or Sonos on your mobile devices. You can likewise connect voice control to your KNX system with...

8.8CVSS5.9AI score0.00496EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/02/10 7:23 p.m.8 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2026/02/10 12:26 a.m.9 views

SUSE CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.5AI score0.00303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-0398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor. CVE-2026-0398 Note that Nessus relies on th...

5.3CVSS6.1AI score0.00303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.7 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-005306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005306 advisory. Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/09 8:15 p.m.10 views

PYSEC-2026-2197

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6.1AI score0.00412EPSS
SaveExploits1References4
NVD
NVD
added 2026/02/09 8:15 p.m.9 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00412EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/02/09 6:49 p.m.6 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/09 6:49 p.m.5 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/09 6:49 p.m.38 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00412EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/09 6:49 p.m.43 views

CVE-2026-25480

Litestar prior to 2.20.0 uses FileStore cache keys derived from Unicode NFKD normalization and ord() substitution without separators, enabling cache key collisions when used as a response-cache backend. An unauthenticated remote attacker can craft paths to trigger collisions, causing one URL to s...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/02/09 6:49 p.m.10 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.7AI score
SaveExploits0References6
OSV
OSV
added 2026/02/09 5:19 p.m.7 views

GHSA-VXQX-RH46-Q2PG Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Summary FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one UR...

6.5CVSS5.7AI score0.00412EPSS
SaveExploits1References6
NVD
NVD
added 2026/02/09 3:16 p.m.15 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00303EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/09 3:16 p.m.8 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.9AI score0.00303EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/09 3:16 p.m.7 views

UBUNTU-CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/09 3:16 p.m.4 views

UBUNTU-CVE-2025-59023

Crafted delegations or IP fragments can poison cached delegations in Recursor...

8.2CVSS5.8AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/09 2:20 p.m.30 views

CVE-2026-0398

PowerDNS Recursor is affected by CVE-2026-0398. The issue involves crafted DNS zones that can cause increased resource usage and crafted CNAME chains that can lead to cache poisoning in the Recursor. The available documents do not specify affected versions, exact root cause in code paths, or offi...

5.3CVSS5.5AI score0.00303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/09 2:20 p.m.49 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/09 2:20 p.m.6 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.5AI score0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder