Lucene search
+L

11827 matches found

OpenVAS
OpenVAS
added 2021/02/25 12:0 a.m.121 views

Apache HTTP Server Detection Consolidation

Consolidation of Apache HTTP Server detections. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0References1
Gitee
Gitee
added 2021/02/24 2:1 p.m.139 views

Exploit for Use After Free in Apache Http_Server

CVE-2019-0211 介绍 CVE-2019-0211 软件架构 软件架构说明 安装教程 1. xxxx 2. xxxx 3. xxxx 使用说明 1. xxxx 2. xxxx 3. xxxx 参与贡献 1. Fork 本仓库 2. 新建 Featxxx 分支 3. 提交代码 4. 新建 Pull Request 特技 1. 使用 Readme\XXX.md 来支持不同的语言,例如 Readme\en.md, Readme\zh.md 2. Gitee 官方博客 blog.gitee.com 3. 你可以 https://gitee.com/explore 这个地址来了解 Git...

7.8CVSS7.1AI score0.65005EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:0 a.m.27 views

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2021-1356)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Onigmo through 6.2.0 has a NULL pointer dereference in onigerrorcodetostr because of fetchtoken in regparse.c.CVE-2019-16161 - Onigmo through 6.2....

7.5CVSS7.3AI score0.03849EPSS
SaveExploits2References4
Packet Storm
Packet Storm
added 2021/02/18 12:0 a.m.401 views

Backdoor.Win32.Agent.aak Code Execution / Cross Site Request Forgery

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/64f2fd4dbd9039e5bc054f475eaa582aB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.aak Vulnerability: Cross Site Request Forgery CSRF - Code Execution Descriptio...

SaveExploits0
Packet Storm
Packet Storm
added 2021/02/18 12:0 a.m.327 views

Backdoor.Win32.Agent.aak Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/64f2fd4dbd9039e5bc054f475eaa582aC.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.aak Vulnerability: Remote Buffer Overflow Description: The HTTP backdoor serve...

0.6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/12 3:2 p.m.12 views

Security Bulletin: Multiple Security Vulnerabilities Have Been Identified In IBM HTTP server shipped with IBM Tivoli Federated Identity Manager

Summary IBM HTTP server is shipped with IBM Tivoli Federated Identity Manager. Information about multiple security vulnerabilities affecting IBM HTTP server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

1.2AI score
SaveExploits0Affected Software1
Fedora
Fedora
added 2021/02/12 1:48 a.m.86 views

[SECURITY] Fedora 32 Update: php-7.4.15-1.fc32

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

7.5CVSS0.4AI score0.03179EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/02/12 12:0 a.m.27 views

Fedora: Security Advisory for php (FEDORA-2021-ae5a54ba78)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.03179EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/02/11 6:15 p.m.20 views

CVE-2021-21299

hyper is an open-source HTTP library for Rust crates.io. In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple...

8.1CVSS7.1AI score0.04771EPSS
SaveExploits0References6
OSV
OSV
added 2021/02/11 6:15 p.m.14 views

UBUNTU-CVE-2021-21299

hyper is an open-source HTTP library for Rust crates.io. In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple...

8.1CVSS7.2AI score0.04771EPSS
SaveExploits0References7
CVE
CVE
added 2021/02/11 6:0 p.m.101 views

CVE-2021-21299

CVE-2021-21299 affects the Rust HTTP library hyper. The vulnerability resides in hyper’s HTTP server code, which may misinterpret requests with multiple Transfer-Encoding headers, potentially treating the payload as chunked when it should be illegal. Exploitation requires three conditions to be m...

8.1CVSS6.4AI score0.04771EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2021/02/11 1:29 p.m.87 views

Low: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update

Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

5.9CVSS6.7AI score0.06968EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux
added 2021/02/11 1:19 p.m.95 views

Low: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update

Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scorin...

5.9CVSS6.7AI score0.06968EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2021/02/11 12:0 a.m.65 views

RHEL 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 (RHSA-2021:0486)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0486 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering. This release serves as...

5.9CVSS7.1AI score0.06968EPSS
SaveExploits3References6
NVD
NVD
added 2021/02/10 10:15 p.m.37 views

CVE-2020-13583

A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS0.01881EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/10 10:15 p.m.18 views

Cross site request forgery (csrf)

A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

5CVSS7.3AI score0.01881EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/02/10 9:39 p.m.69 views

CVE-2020-13583

CVE-2020-13583 affects Micrium uC-HTTP 3.01.00. TALOS details describe a denial-of-service caused by a NULL pointer dereference in the uC-HTTP server when handling multipart form data; specifically, if FormCfgPtr is NULL or FormBoundaryPtr is not allocated, HTTPsReq_HdrParse can dereference a NUL...

8.6CVSS7.3AI score0.01881EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/10 9:39 p.m.49 views

CVE-2020-13583

A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS7.4AI score0.01881EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2021/02/10 2:38 p.m.15 views

Exploit for Improper Locking in Apple Ipados

It is an exploit module targeting Apache HTTP Serv...

7CVSS7.3AI score0.02222EPSS
SaveExploits1
Prion
Prion
added 2021/02/08 9:15 p.m.20 views

Design/Logic Flaw

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

6.4CVSS9.1AI score0.01462EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder