Lucene search
+L

105501 matches found

NVD
NVD
added 2026/07/08 5:17 p.m.16 views

CVE-2025-3110

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy...

7.5CVSS0.00259EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/08 4:38 p.m.7 views

Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

A flaw was found in Apache Tomcat. A remote attacker could exploit an inconsistent interpretation of HTTP requests, known as HTTP Request/Response Smuggling, by sending a specially crafted request with an invalid chunk extension. This vulnerability allows an attacker to manipulate the way HTTP...

7.5CVSS6.9AI score0.0052EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/08 4:38 p.m.8 views

tomcat: security constraint bypass with HTTP/0.9

A flaw was found in Tomcat. An improper input validation vulnerability allows an attacker to bypass security constraints. Specifically, if a security constraint is configured to permit HEAD requests to a URI but deny GET requests, a malformed or specification invalid HEAD request using the HTTP/0...

6.5CVSS7AI score0.00494EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/08 4:19 p.m.11 views

EUVD-2025-210441

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy...

6.9CVSS6AI score0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/08 4:19 p.m.43 views

CVE-2025-3110

CVE-2025-3110 affects OpenVPN Access Server 2.7.2 through 3.1.0, where the server accepts bare line-feed sequences inside HTTP header values, enabling HTTP request smuggling when deployed behind a reverse proxy. Red Hat’s advisory notes this flaw stems from unstandardized LF handling in HTTP head...

7.5CVSS6AI score0.00259EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/08 4:19 p.m.45 views

CVE-2025-3110

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy...

6.9CVSS0.00259EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/08 3:52 p.m.13 views

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...

9.1CVSS6.6AI score0.01557EPSS
SaveExploits1References5
OSV
OSV
added 2026/07/08 1:46 p.m.4 views

SUSE-SU-2026:22582-1 Security update for curl

This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409. - CVE-2026-8927: env-set cross-proxy Digest auth state leak...

9.8CVSS6.1AI score0.00584EPSS
SaveExploits10References21
OSV
OSV
added 2026/07/08 1:46 p.m.9 views

SUSE-SU-2026:22553-1 Security update for curl

This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409. - CVE-2026-8927: env-set cross-proxy Digest auth state leak...

9.8CVSS6.1AI score0.00584EPSS
SaveExploits10References21
GithubExploit
GithubExploit
added 2026/07/08 12:16 p.m.105 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-42013 - Apache HTTP Server 2.4.50 경로 조작 RCE 작성: eu...

9.8CVSS7.2AI score0.99992EPSS
SaveExploits182
Rockylinux
Rockylinux
added 2026/07/08 12:6 p.m.12 views

nginx security, bug fix, and enhancement update

An update is available for nginx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a...

9.2CVSS6.8AI score0.04044EPSS
SaveExploits2
OSV
OSV
added 2026/07/08 12:6 p.m.8 views

RLSA-2026:36364 Important: nginx security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes...

8.1CVSS7.4AI score0.04044EPSS
SaveExploits2References2
Rockylinux
Rockylinux
added 2026/07/08 12:4 p.m.11 views

perl-HTTP-Daemon security update

An update is available for perl-HTTP-Daemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The perl-HTTP-Daemon package includes the HTTP::Daemon class, a...

9.1CVSS6.5AI score0.01398EPSS
SaveExploits0
OSV
OSV
added 2026/07/08 12:4 p.m.6 views

RLSA-2026:36187 Important: perl-HTTP-Daemon security update

The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fixes: perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in...

8.1CVSS6.4AI score0.01398EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/08 12:3 p.m.7 views

RLSA-2026:36618 Important: nginx:1.24 security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes...

8.1CVSS7.4AI score0.04044EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
added 2026/07/08 12:3 p.m.18 views

Important: Red Hat Security Advisory: nginx:1.26 security, bug fix, and enhancement update

An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.2CVSS7.9AI score0.04044EPSS
SaveExploits2References2
OSV
OSV
added 2026/07/08 10:9 a.m.11 views

RHSA-2026:36189 Red Hat Security Advisory: perl-HTTP-Daemon security update

Bulletin has no description...

8.1CVSS5.9AI score0.01398EPSS
SaveExploits0References10
OSV
OSV
added 2026/07/08 10:9 a.m.10 views

RHSA-2026:36188 Red Hat Security Advisory: perl-HTTP-Daemon security update

Bulletin has no description...

8.1CVSS5.9AI score0.01398EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/07/08 8:21 a.m.8 views

CVE-2026-55688

A flaw was found in the AsyncHttpClient AHC library. The ThreadSafeCookieStore component did not properly verify the domain attribute of cookies, allowing a malicious host to set a cookie for an unrelated domain. This cookie would then be sent by the client in subsequent requests to the targeted...

4CVSS5.8AI score0.0022EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/07/08 7:10 a.m.11 views

CVE-2026-49365

A flaw was found in the Apache Camel Netty HTTP component. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed request that triggers an exception during route processing. Due to a misconfiguration where muteException is set to false by default, the system...

5.3CVSS5.8AI score0.00501EPSS
SaveExploits1References4
Rows per page
Query Builder