Lucene search
+L

16916 matches found

Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.12 views

PT-2026-76774

An issue in ACME mini httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle request function...

7.5CVSS5.4AI score0.00409EPSS
SaveExploits0References3
Gentoo Linux
Gentoo Linux
added 2026/08/17 12:00 a.m.6 views

nginx: Multiple Vulnerabilities

Background nginx is a robust, small, and high performance HTTP and reverse proxy server. Description Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

8.2CVSS6.6AI score0.02741EPSS
SaveExploits0
NVD
NVD
added 2026/08/14 12:16 p.m.8 views

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS0.00335EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/14 12:16 p.m.7 views

UBUNTU-CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.6AI score0.00335EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2026/08/14 12:06 p.m.13 views

nghttp2 security update

An update is available for nghttp2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libnghttp2 is a library implementing the Hypertext Transfer Protocol version...

6.3CVSS5.7AI score0.00263EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/08/14 12:04 p.m.8 views

nghttp2 security update

An update is available for nghttp2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libnghttp2 is a library implementing the Hypertext Transfer Protocol version ...

6.3CVSS5.7AI score0.00263EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 12:04 p.m.10 views

RLSA-2026:54662 Moderate: nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...

5.4CVSS5.7AI score0.00263EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/14 11:35 a.m.10 views

CVE-2026-73051 actix-http before 3.12.1 HTTP Request Smuggling via CL.TE

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.5AI score0.00335EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/14 11:35 a.m.10 views

EUVD-2026-58619

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.6AI score0.00335EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/14 11:35 a.m.8 views

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.5AI score0.00335EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/14 11:35 a.m.32 views

CVE-2026-73051 actix-http before 3.12.1 HTTP Request Smuggling via CL.TE

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS0.00335EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/14 11:35 a.m.11 views

CVE-2026-73051 actix-http before 3.12.1 HTTP Request Smuggling via CL.TE

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.6AI score
SaveExploits0References4
CVE
CVE
added 2026/08/14 11:35 a.m.23 views

CVE-2026-73051

CVE-2026-73051 affects actix-http before 3.12.1. The HTTP/1.1 parser accepts requests with both Content-Length and Transfer-Encoding: chunked headers, enabling HTTP request smuggling. Unauthenticated remote attackers could use a front-end intermediary to desynchronize backend requests and smuggle...

6.3CVSS5.5AI score0.00335EPSS
SaveExploits0References2
Veracode
Veracode
added 2026/08/14 10:57 a.m.8 views

Denial Of Service (DoS)

Micrometer is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specially crafted HTTP requests, which allows an attacker to send malicious requests that consume excessive resources and cause the affected application to become unavailable...

7.5CVSS5.2AI score0.00773EPSS
SaveExploits0References12Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/14 7:19 a.m.5 views

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling and a denial of service. This affects IBM WebSphere Application Server Liberty with the servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, servlet-6.1,...

5.4AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/14 6:20 a.m.5 views

Security Bulletin: IBM Transformation Extender Advanced is affected by IBM WebSphere Application Server Liberty vulnerabilities

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine uses WebSphere Application Server Liberty which is affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the...

5.5AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.10 views

AlmaLinux 9 : nghttp2 (ALSA-2026:54662)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:54662 advisory. nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the...

6.3CVSS5.5AI score0.00263EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.7 views

RockyLinux 10 : nghttp2 (RLSA-2026:54650)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:54650 advisory. nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the...

6.3CVSS5.5AI score0.00263EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-73051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and...

6.3CVSS5.6AI score0.00335EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/13 7:01 p.m.24 views

CVE-2026-73530

The CVE concerns Flyto2 Core prior to 2.28.0, where SSRF guard bypass is possible via unblocked IPv6 address :: that kernels treat as loopback akin to 0.0.0.0. Attackers can cause requests or 302 redirects through http.get, http.request, and http.batch to reach services bound to IPv6 loopback, by...

7.7CVSS5.3AI score0.00312EPSS
SaveExploits0References3
Rows per page
Query Builder