Lucene search
+L

4024 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.11 views

MiracleLinux 8 : nginx:1.16 (AXSA:2021-1530:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1530:01 advisory. nginx: HTTP request smuggling in configurations with URL redirect used as errorpage CVE-2019-20372 Tenable has extracted the preceding description block...

5.3CVSS7.9AI score0.14961EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.8 views

MiracleLinux 7 : rh-nodejs10-nodejs-10.23.1-2.el7 (AXSA:2021-1479:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1479:01 advisory. libuv: buffer overflow in realpath CVE-2020-8252 nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS...

9.8CVSS7.9AI score0.69377EPSS
SaveExploits8References11
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.7 views

MiracleLinux 8 : nodejs:18 (AXSA:2022-4480:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4480:01 advisory. nodejs: weak randomness in WebCrypto keygen CVE-2022-35255 nodejs: HTTP Request Smuggling due to incorrect parsing of header fields CVE-2022-35256...

9.1CVSS8.5AI score0.02661EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.16 views

MiracleLinux 9 : nodejs-16.20.2-8.el9_4 (AXSA:2024-8149:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8149:02 advisory. nodejs: CONTINUATION frames DoS CVE-2024-27983 nodejs: using the fetch function to retrieve content from an untrusted URL leads to denial of service...

8.2CVSS7AI score0.87211EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:00 a.m.12 views

MiracleLinux 8 : httpd:2.4 (AXSA:2022-3127:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3127:01 advisory. httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling CVE-2022-22720 Tenable has extracted the preceding description...

9.8CVSS8.4AI score0.28189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.12 views

MiracleLinux 4 : tomcat6-6.0.24-72.AXS4 (AXSA:2014-451:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-451:03 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Jav...

7.5CVSS7.3AI score0.83175EPSS
SaveExploits11References4
Snyk
Snyk
added 2026/01/15 9:31 p.m.10 views

HTTP Request Smuggling

Overview io.vertx:vertx-core is a tool-kit for building reactive applications on the JVM. Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper handling of / in the output buffer by removeDots function in Static Handler. An attacker can prevent access to stati...

6.9CVSS7AI score0.0039EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/15 8:10 p.m.14 views

GHSA-MP2G-9VG9-F4CG h3 v1 has Request Smuggling (TE.TE) issue

I was digging into h3 v1 specifically v1.15.4 and found a critical HTTP Request Smuggling vulnerability. Basically, readRawBody is doing a strict case-sensitive check for the Transfer-Encoding header. It explicitly looks for "chunked", but per the RFC, this header should be case-insensitive. The...

8.9CVSS5.9AI score0.00635EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/01/15 8:10 p.m.22 views

h3 v1 has Request Smuggling (TE.TE) issue

I was digging into h3 v1 specifically v1.15.4 and found a critical HTTP Request Smuggling vulnerability. Basically, readRawBody is doing a strict case-sensitive check for the Transfer-Encoding header. It explicitly looks for "chunked", but per the RFC, this header should be case-insensitive. The...

9.8CVSS6.9AI score0.00635EPSS
SaveExploits1References6Affected Software1
vulnersOsv
vulnersOsv
added 2026/01/14 7:51 p.m.4 views

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2008 more potentially affected by CVE-2026-22036 via undici (>=6.0.0, <=6.22.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =1.0.0, =1.0.1 and more Source cves: CVE-2026-22036 Source advisory: SNYK:JS-UNDICI-14943963...

7.5CVSS6.6AI score0.00481EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.8 views

MiracleLinux 9 : buildah-1.39.4-2.el9_6 (AXSA:2025-10547:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10547:03 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block...

9.1CVSS7.1AI score0.00811EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.9 views

MiracleLinux 9 : podman-5.4.0-10.el9_6 (AXSA:2025-10671:08)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10671:08 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block...

9.1CVSS7.1AI score0.00811EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.7 views

MiracleLinux 8 : weldr-client-35.12-3.el8_10 (AXSA:2025-10404:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10404:01 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block...

9.1CVSS7.2AI score0.00811EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.8 views

MiracleLinux 8 : grafana-pcp-5.1.1-10.el8_10 (AXSA:2025-10022:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10022:01 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block...

9.1CVSS7.2AI score0.00811EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.11 views

MiracleLinux 9 : golang-1.23.9-1.el9_6 (AXSA:2025-10534:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10534:02 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block...

9.1CVSS7.1AI score0.00811EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:36 a.m.12 views

CVE-2021-41450

An HTTP request smuggling attack in TP-Link AX10v1 before v1211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet...

7.5CVSS7AI score0.01771EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:00 a.m.16 views

CVE-2020-7655

netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Transfer encoding header parsing which could allow for CL:TE or TE:TE attacks...

6.1CVSS6.9AI score0.00819EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:59 a.m.16 views

CVE-2020-7658

meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing...

6.1CVSS6.8AI score0.00686EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:20 a.m.17 views

CVE-2021-33683

SAP Web Dispatcher and Internet Communication Manager ICM, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.73, WEBDISP 7.53, 7.73, 7.77, 7.81, 7.82, 7.83,...

5.4CVSS6.8AI score0.00546EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.17 views

PT-2026-2154

CVE-2026-22159 - Apache HTTP Server HTTP Request Smuggling CVE ID : CVE-2026-22159 Published : Jan. 7, 2026, 12:17 p.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7AI score
SaveExploits0References1
Rows per page
Query Builder