Lucene search
+L

9 matches found

ATTACKERKB
ATTACKERKB
added 2026/08/05 8:17 p.m.9 views

CVE-2026-71310

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...

5.9CVSS5.5AI score0.0038EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/05 12:00 a.m.12 views

PT-2026-68329

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description The shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses using http.ReadResponse over an unrestricted buffered reader. This allows a malicious or compromised proxy, or an...

5.9CVSS5.2AI score0.0038EPSS
SaveExploits0References15
OSV
OSV
added 2026/06/02 9:14 a.m.12 views

SUSE-SU-2026:21980-1 Security update for rsync

This update for rsync fixes the following issues - CVE-2025-10158: Out of bounds array access via negative index bsc1254441. - CVE-2026-29518: Symlink-Race TOCTOU in Daemon use chroot = no bsc1264511. - CVE-2026-41035: count of entries mismatch can lead to a use-after-free bsc1262223. -...

8.1CVSS5.8AI score0.0078EPSS
SaveExploits1References17
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:00 a.m.18 views

SUSE SLES15 Security Update : rsync (SUSE-SU-2026:2083-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2083-1 advisory. This update for rsync fixes the following issues - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-41035: coun...

9.8CVSS7AI score0.72059EPSS
SaveExploits9References40
OSV
OSV
added 2026/03/24 6:16 p.m.8 views

DEBIAN-CVE-2026-32854

LibVNCServer versions 0.9.15 and prior fixed in commit dc78dee contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit...

7.5CVSS5.4AI score0.05322EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/03 6:13 p.m.28 views

CVE-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...

3.7CVSS0.00301EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2015-5787

Malware in sbrugna...

5CVSS4.9AI score0.01698EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.10 views

SUSE CVE-2003-1605

curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server...

7.5CVSS7.1AI score0.01972EPSS
SaveExploits0References3
OSV
OSV
added 2018/08/23 7:29 p.m.14 views

CVE-2003-1605

curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server...

7.5CVSS7.6AI score0.01972EPSS
SaveExploits0References2
Rows per page
Query Builder