Lucene search
+L

181 matches found

Vulnrichment
Vulnrichment
added 2025/11/25 7:21 a.m.4 views

CVE-2025-62691

Security Point Windows of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege...

9.8CVSS7.9AI score0.00678EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/17 3:15 p.m.36 views

CVE-2025-55085

In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior...

8.8CVSS0.00567EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/17 2:22 p.m.10 views

EUVD-2025-34883

In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior...

8.8CVSS6.5AI score0.00567EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/15 6:31 p.m.10 views

EUVD-2025-34664

Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of complete error checking when the MIME fields of the HTTP header are...

5.8CVSS6.3AI score0.00356EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/15 4:19 p.m.20 views

CVE-2025-20360 Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of complete error checking when the MIME fields of the HTTP header are...

5.8CVSS0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/15 12:00 a.m.14 views

PT-2025-42382

Name of the Vulnerable Software and Affected Versions Cisco Snort 3 affected versions not specified Description A flaw exists in the Snort 3 HTTP Decoder that may allow a remote, unauthenticated attacker to disrupt service. The issue stems from insufficient error checking during the parsing of HT...

5.8CVSS5.5AI score0.00356EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2016-3300

Malware in sbrugna...

7.5CVSS8.5AI score0.07013EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-0311

Malware in sbrugna...

5.8CVSS7.4AI score0.09386EPSS
SaveExploits0References46
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.3 views

Unity Linux 20.1070e Security Update: php (UTSA-2025-984693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984693 advisory. In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when http request module parses HTTP response obtained from...

6.3CVSS6.2AI score0.0056EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-1226

Malicious code in bioql PyPI...

7.5CVSS6.8AI score0.01085EPSS
SaveExploits0References10
AlmaLinux
AlmaLinux
added 2025/09/11 12:00 a.m.10 views

Moderate: php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

9.8CVSS7.2AI score0.02286EPSS
SaveExploits5References18
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2015-5740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request...

9.8CVSS7.1AI score0.03657EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/08/26 12:00 a.m.18 views

Tenda AC6 Denial of Service Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. A denial of service vulnerability exists in the Tenda AC6, which originates from a problem with the HTTP...

8.6CVSS7AI score0.00394EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-28129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apach...

7.5CVSS7AI score0.02299EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/20 2:15 p.m.7 views

CVE-2025-30256

A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP requests can lead to a reboot. An attacker can send multiple network packets to trigger this vulnerability...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.7 views

Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞

Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense are both products of Cisco, Inc.Cisco Secure Firewall Adaptive Cisco Secure Firewall Adaptive Security Appliance is an enterprise-class firewall software.Cisco Secure Firewall Threat Defense is an integrate...

7.7CVSS6.6AI score0.005EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:54 a.m.10 views

CVE-2024-22081

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated memory corruption can occur in the HTTP header parsing mechanism...

9.8CVSS7.2AI score0.00785EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:05 a.m.9 views

CVE-2022-28129

Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...

7.5CVSS6.6AI score0.02299EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/03 5:15 p.m.9 views

CVE-2025-1876

A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function httprequestparse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched...

9.8CVSS6.4AI score0.03485EPSS
SaveExploits1References5
OSV
OSV
added 2025/01/08 6:44 a.m.7 views

USN-7190-1 tinyproxy vulnerability

It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this issue to cause a DoS or possibly execute arbitrary code...

9.8CVSS6.3AI score0.63076EPSS
SaveExploits2References2
Rows per page
Query Builder