Lucene search
+L

12 matches found

CVE
CVE
•added 2026/10/20 9:51 p.m.•19 views

CVE-2026-93441

The IBM QRadar SIEM is vulnerable to a denial of service via the HTTP Receiver protocol due to uncontrolled resource consumption (CWE-400). The vulnerability impacts versions 7.4-20210823144546 through 7.5-20260930064858 , and 7.6-20260330053257 through 7.6-20260930064910 . Affected customers sho...

8.6CVSS5.8AI score0.00327EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/18 12:17 p.m.•6 views

CVE-2026-111999

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

8.7CVSS0.00532EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/18 11:38 a.m.•13 views

CVE-2026-111999

Versions 0.8.0 through 0.9.0 of Vanus are affected by a missing authentication vulnerability in the gateway CloudEvents HTTP receiver . This flaw allows unauthenticated remote attackers to bypass token authentication and authPublish checks by sending forged CloudEvents to the /namespaces/{ns}/eve...

8.7CVSS5.9AI score0.00532EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/18 11:38 a.m.•33 views

CVE-2026-111999 Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

8.7CVSS0.00532EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/18 11:38 a.m.•6 views

EUVD-2026-103452

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

8.7CVSS6AI score0.00532EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/18 11:38 a.m.•2 views

CVE-2026-111999 Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

8.7CVSS6AI score
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/13 5:25 p.m.•16 views

Security Bulletin: An IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service, SQL injection and could allow a remote attacker to execute arbitrary code on the system.

Summary IBM QRadar when using the HTTP Receiver protocol could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. Vulnerability Details CVEID:CVE-2026-93441 DESCRIPTION: IBM QRadar could allow a remote attacker to cause a denial of service due to...

8.6CVSS5.9AI score0.00327EPSS
SaveExploits0Affected Software1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7469/info Microsoft BizTalk Server 2002 contains a boundary condition error that could allow a buffer to be overrun. Successful exploitation could allow arbitrary code execution in the security context of the IIS Server...

7.1AI score
SaveExploits0
NVD
NVD
•added 2003/05/12 4:00 a.m.•26 views

CVE-2003-0117

Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...

7.5CVSS7.7AI score0.09055EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2003/05/02 4:00 a.m.•32 views

CVE-2003-0117

Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...

7.7AI score0.09055EPSS
SaveExploits1References2
CVE
CVE
•added 2003/05/02 4:00 a.m.•71 views

CVE-2003-0117

CVE-2003-0117 : A buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 enables an attacker to execute arbitrary code via a crafted HTTP request. The vulnerability is discussed in external advisories referencing MS03-016 and is corroborated ...

7.5CVSS7.7AI score0.09055EPSS
SaveExploits1References2Affected Software1
Exploit DB
Exploit DB
•added 2003/04/30 12:00 a.m.•33 views

Microsoft BizTalk Server 2002 - HTTP Receiver Buffer Overflow

source: https://www.securityfocus.com/bid/7469/info Microsoft BizTalk Server 2002 contains a boundary condition error that could allow a buffer to be overrun. Successful exploitation could allow arbitrary code execution in the security context of the IIS Server hosting the application. It is...

7.5CVSS5.8AI score0.09055EPSS
SaveExploits1
Rows per page
Query Builder