112 matches found
AZL-81239 CVE-2026-21710 affecting package nodejs for versions less than 20.14.0-15
A flaw in Node.js HTTP request handling causes an uncaught TypeError when a request is received with a header named proto and the application accesses req.headersDistinct. When this occurs, dest"proto" resolves to Object.prototype rather than undefined, causing .push to be called on a non-array...
CVE-2026-21710: Allocation of Resources Without Limits or Throttling
A flaw in Node.js HTTP request handling causes an uncaught TypeError when a request is received with a header named proto and the application accesses req.headersDistinct. When this occurs, dest"proto" resolves to Object.prototype rather than undefined, causing .push to be called on a non-array...
The vulnerability of the App Router router on the Next.js software development platform for creating web applications, as well as the CLI interface of the Vercel platform, allows attackers to compromise the integrity of protected information.
The vulnerability of the App Router router on the Next.js software development platform and the Vercel command-line interface CLI platform is related to shortcomings in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...
PT-2025-53526
Уязвимость платформы управления рисками на предприятии IBM OpenPages связана с недостатками обработки HTTP-запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, осуществить атаку отравления кэша или выполнить перехват сеанса путем отправки специально созданного...
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...
EUVD-2017-15964
Malware in sbrugna...
EUVD-2014-0451
Malware in sbrugna...
EUVD-2014-0464
Malware in sbrugna...
EUVD-2024-41622
Malicious code in bioql PyPI...
EUVD-2025-8258
Malicious code in bioql PyPI...
EUVD-2024-27702
Malicious code in bioql PyPI...
EUVD-2021-29721
Malicious code in bioql PyPI...
EUVD-2022-0358
Malicious code in bioql PyPI...
EUVD-2025-6865
Malicious code in bioql PyPI...
EUVD-2025-10686
Malicious code in bioql PyPI...
EUVD-2024-3526
Malicious code in bioql PyPI...
Ubuntu: Security Advisory (USN-7643-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-53573
Уязвимость программной платформы создания веб-приложений Next.js связана с недостатками обработки HTTP-запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...
RHEL 9 : skopeo (RHSA-2025:9065)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9065 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify file...
RHEL 8 : grafana-pcp (RHSA-2025:8983)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:8983 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace...