Lucene search
K

6 matches found

Snyk
Snyk
added 2026/05/11 4:12 p.m.10 views

Acceptance of Extraneous Untrusted Data With Trusted Data

Overview next is a react framework. Affected versions of this package are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data through the improper handling of the x-nextjs-data header in middleware or proxy redirect responses. An attacker can disrupt access to redirect paths b...

6.3CVSS5.8AI score0.00008EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2026-22551

Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally...

8.4CVSS5.7AI score0.00042EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/23 4:45 p.m.6 views

Security Bulletin: TSSC/IMC is affected to an Acceptance of Extraneous Untrusted Data With Trusted Data

Summary TSSC/IMC is affected to an Acceptance of Extraneous Untrusted Data With Trusted Data. A patch was released to update the bind package. Vulnerability Details CVEID:CVE-2025-40778 DESCRIPTION: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an...

8.6CVSS6AI score0.00005EPSS
Exploits1Affected Software1
OSV
OSV
added 2024/04/11 12:16 p.m.2 views

CLSA-2024-1712837808 postgresql: Fix of CVE-2021-23214

CVE-2021-23214: Reject extraneous data after SSL or GSS encryption handshake...

8.1CVSS5.8AI score0.00193EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:15 a.m.1 views

SUSE CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITORREQPAMINITCTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafte...

1.9CVSS6.5AI score0.00102EPSS
Exploits0References16
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.1 views

wolfSSL 数据伪造问题漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, Inc. in the United States. A security vulnerability exists in wolfSSL that stems from incorrectly skipping OCSP validation under certain circumstances containing extraneous...

5.9CVSS5.3AI score0.00183EPSS
Exploits0References2
Rows per page
Query Builder