Lucene search
+L

266 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-18660

Malware in sbrugna...

9.8CVSS9.2AI score0.01334EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2014-9311

Malware in sbrugna...

5CVSS6.1AI score0.01393EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-1339

Malware in sbrugna...

8.8CVSS6AI score0.02327EPSS
SaveExploits1References20
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-6261

Malware in sbrugna...

10CVSS9.5AI score0.02689EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-7119

Malware in sbrugna...

5.8CVSS6AI score0.04026EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-23343

Malware in sbrugna...

6.1CVSS6.3AI score0.00666EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/29 10:04 p.m.6 views

CVE-2025-59933 libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

5.1CVSS6.8AI score
SaveExploits0References7
NVD
NVD
added 2025/09/18 6:15 a.m.10 views

CVE-2023-49564

The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...

8.8CVSS0.00416EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/18 6:10 a.m.23 views

CVE-2023-49564 Authentication Bypass

The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...

0.00416EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/18 6:10 a.m.6 views

CVE-2023-49564 Authentication Bypass

The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...

6.8AI score0.00416EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.12 views

PT-2025-38296

Name of the Vulnerable Software and Affected Versions CBIS/NCS Manager affected versions not specified Description The CBIS/NCS Manager API is susceptible to an authentication bypass. An unauthenticated user can gain unauthorized access to API functions by sending a specially crafted HTTP header...

8.8CVSS6.9AI score0.00416EPSS
SaveExploits0References8
OSV
OSV
added 2025/09/12 11:09 a.m.6 views

OESA-2025-2279 libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fixes: A denial-of-service vulnerability has been identified in the libso...

4.3CVSS6.9AI score0.00385EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.2 views

Cisco Secure Firewall Threat Defense Remote Access VPN Web Server DoS (cisco-sa-asaftd-vpnwebs-dos-hjBhmBsX)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability. - A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could all...

7.7CVSS6AI score0.005EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.3 views

Cisco Secure Adaptive Security Appliance Remote Access VPN Web Server DoS (cisco-sa-asaftd-vpnwebs-dos-hjBhmBsX)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software...

7.7CVSS6AI score0.005EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.16 views

PT-2025-34103 · Undefined · Undefined

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception...

8.6CVSS8.1AI score0.00803EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-39293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header falsely designating that many files are present can cause a NewReader or...

7.5CVSS6.5AI score0.06934EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/14 12:00 a.m.7 views

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2025-1934)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read.CVE-2025-32050 A...

7.5CVSS6.7AI score0.00818EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/05/29 8:50 a.m.9 views

CVE-2025-41653

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive...

7.5CVSS7.1AI score0.0054EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/16 6:16 p.m.11 views

AZL-61902 CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

4.3CVSS5.7AI score0.00385EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/16 6:16 p.m.12 views

AZL-61910 CVE-2025-4476 affecting package libsoup for versions less than 3.4.4-7

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

4.3CVSS5.7AI score0.00385EPSS
SaveExploits1References1
Rows per page
Query Builder