Lucene search
+L

511 matches found

Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•32 views

PT-2026-29123

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.http auth HTTP authentication, when a client connects to the broker using MQTT CONNECT without providing username/password, and the configuration params uses the placeholders %u / %P...

3.1CVSS5.7AI score0.00414EPSS
SaveExploits1References6
osv_ghsa
osv_ghsa
•added 2026/03/27 10:30 p.m.•32 views

GHSA-QM2M-28PF-HGJW OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers

Summary Gateway Plugin HTTP auth: "gateway" Mints operator.admin Runtime Scope Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verification time: 2026.3.24 Details Gateway-authenticated plugin...

8.6CVSS5.9AI score0.00298EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2026/03/18 8:07 p.m.•31 views

GHSA-P7M9-V2CM-2H7M HAPI FHIR HTTP authentication leak in redirects

Impact When setting headers in HTTP requests, the internal HTTP client sends headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the Location: response header value. Sending the same set of...

9.8CVSS5.8AI score0.00281EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/11 10:08 a.m.•17 views

CVE-2026-1965 bad reuse of HTTP Negotiate connection

libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of...

6.9AI score0.00297EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/03/11 10:08 a.m.•41 views

CVE-2026-1965

libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of...

6.5CVSS6.9AI score0.00297EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/01/16 11:10 a.m.•23 views

OESA-2026-1164 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a...

9.8CVSS8.2AI score0.64816EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2026/01/09 10:06 a.m.•25 views

CVE-2019-20138

The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's cryptopwhashstr is not used...

7.5CVSS7.2AI score0.00832EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2025/11/14 8:23 a.m.•15 views

Security update for squid

This update for squid fixes the following issues: CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure bsc1252281 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.6CVSS8AI score0.64816EPSS
SaveExploits1References4
osv_clsa
osv_clsa
•added 2025/11/13 3:52 p.m.•20 views

CLSA-2025-1763024537 squid: Fix of CVE-2025-62168

CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...

10CVSS8.1AI score0.64816EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•11 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : Squid vulnerability (USN-7845-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7845-1 advisory. Leonardo Giovannini discovered that Squid failed to redact HTTP Authentication credentials in a...

10CVSS8.2AI score0.64816EPSS
SaveExploits1References2
Mend
Mend
•added 2025/10/17 4:21 p.m.•3 views

CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

10CVSS7.9AI score0.64816EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/17 12:00 a.m.•5 views

CVE-2025-62168: Generation of Error Message Containing Sensitive Information

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

10CVSS8.1AI score0.64816EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2010-0585

Malware in sbrugna...

7.5CVSS6.4AI score0.01524EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-10084

Malware in sbrugna...

6.5CVSS7.3AI score0.01372EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2020-27047

Malware in sbrugna...

4.3CVSS5.3AI score0.00575EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2015-3711

Malware in sbrugna...

5CVSS6.5AI score0.02167EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2019-17246

Malware in sbrugna...

9.8CVSS8.6AI score0.02128EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-16424

Malware in sbrugna...

5.3CVSS6.5AI score0.00737EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2008-1528

Malware in sbrugna...

7.5CVSS6.4AI score0.01424EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2013-6253

Malware in sbrugna...

3.5CVSS5.6AI score0.00875EPSS
SaveExploits0References3
Rows per page
Query Builder