Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-6961

Malicious code in bioql PyPI...

5.8CVSS5.7AI score0.00229EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-1494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configure...

5.8CVSS6AI score0.00229EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 3:44 a.m.3 views

CVE-2023-30851

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple toEndpoints AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be...

5.3CVSS5.3AI score0.00173EPSS
Exploits0References1
OSV
OSV
added 2024/08/20 8:31 p.m.10 views

GO-2023-1785 Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium...

5.3CVSS4.4AI score0.00173EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/03/18 9:31 p.m.12 views

CVE-2024-28248 Cilium intermittent HTTP policy bypass

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.9 and prior to versions 1.13.13, 1.14.8, and 1.15.2, Cilium's HTTP policies are not consistently applied to all traffic in the scope of the policies, leading to HTTP traffic being...

7.2CVSS6.7AI score0.01021EPSS
Exploits0References5
OSV
OSV
added 2023/05/22 8:33 p.m.17 views

GHSA-2H44-X2WX-49F4 Potential HTTP policy bypass when using header rules in Cilium

Impact This issue only impacts users who: - Have a HTTP policy that applies to multiple toEndpoints AND - Have an allow-all rule in place that affects only one of those endpoints In such cases, a wildcard rule will be appended to the set of HTTP rules, which could cause bypass of HTTP policies...

5.3CVSS4.9AI score0.00173EPSS
Exploits0References6
OSV
OSV
added 2021/04/29 6:15 p.m.2 views

CVE-2021-1495

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this...

5.3CVSS6.2AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2020/10/21 12:0 a.m.2 views

PT-2020-4710 · Cisco +1 · Cisco Ftd +5

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD versions affected versions not specified Cisco SD-WAN versions affected versions not specified Cisco IOS XE versions affected versions not specified Cisco Meraki versions affected versions not specified...

8.6CVSS5.6AI score0.03416EPSS
Exploits0References42
Rows per page
Query Builder