Lucene search
+L

35 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/16 12:00 a.m.•11 views

UBUNTU-CVE-2026-18660

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/15 10:17 a.m.•21 views

CVE-2026-18660

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS0.00315EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/15 10:17 a.m.•17 views

DEBIAN-CVE-2026-18660

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/15 10:17 a.m.•6 views

CVE-2026-18660

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/15 9:38 a.m.•16 views

CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/15 9:38 a.m.•18 views

EUVD-2026-101987

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/15 9:38 a.m.•12 views

CVE-2026-18660

In Eclipse Jetty, across various versions of "jetty-server", and "jetty-proxy", the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/15 9:38 a.m.•48 views

CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS0.00315EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/15 9:38 a.m.•14 views

CVE-2026-18660

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•13 views

PT-2026-114869

Name of the Vulnerable Software and Affected Versions Eclipse Jetty affected versions not specified Description In jetty-server and jetty-proxy, the host whitelist and blacklist mechanisms are case-sensitive. This allows hosts to bypass security filters if they differ only by the casing of the...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•9 views

CVE-2026-18660: Improper Handling of Case Sensitivity

In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

8.8CVSS7.1AI score0.00315EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/10/14 4:00 p.m.•4 views

Eclipse Jetty input validation error vulnerability

Security vulnerabilities exist in Eclipse Jetty versions 12.1.11 and earlier within the 12.1.x series, as well as versions 12.0.38 and earlier within the 12.0.x series. Additionally, vulnerabilities are present in Eclipse Jetty jetty-proxy versions 11.0.32 and earlier within the 11.0.x series,...

8.8CVSS7.2AI score0.00315EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/07 4:27 p.m.•17 views

CVE-2025-59159

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

9.6CVSS8.1AI score0.0025EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2016-6653

Malware in sbrugna...

7.2CVSS7AI score0.02241EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2015-7255

Malware in sbrugna...

8.8CVSS7.8AI score0.02061EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/06 8:18 p.m.•23 views

EUVD-2025-32552

SillyTavern Web Interface Vulnerable DNS Rebinding...

9.6CVSS8.5AI score0.0025EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/10/06 3:31 p.m.•4 views

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

9.6CVSS8AI score0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/06 3:31 p.m.•40 views

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

9.6CVSS0.0025EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/10/06 3:31 p.m.•26 views

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

9.6CVSS8AI score0.0025EPSS
SaveExploits0References7
CVE
CVE
•added 2025/10/06 3:31 p.m.•88 views

CVE-2025-59159

SillyTavern’s web UI (prior to 1.13.4) is vulnerable to DNS rebinding, enabling attackers to read chats, inject HTML, install extensions, and execute phishing-style actions. The issue is mitigated in 1.13.4 by adding a host validation setting (hostWhitelist.enabled) in config.yaml or SILLYTAVERN_...

9.6CVSS8AI score0.0025EPSS
SaveExploits0References5
Rows per page
Query Builder