CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1815 matches found

CNNVD•added 2025/10/15 12:0 a.m.•8 views

F5 BIG-IP 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that stems from a specially crafted request that could cause the Traffic Management Microkern...

8.7CVSS6.6AI score0.00327EPSS

SaveExploits0References1

CNNVD•added 2025/10/09 12:0 a.m.•12 views

Juniper Networks Junos Space 资源管理错误漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A resource management error vulnerability exists in Juniper Networ...

8.7CVSS6.4AI score0.00385EPSS

SaveExploits0References1

BDU FSTEC•added 2025/10/08 12:0 a.m.•5 views

The vulnerability of the Netty network programming framework, related to deficiencies in HTTP request processing, allows attackers to carry out attacks by replacing HTTP requests with malicious content.

The vulnerability of the Netty network programming framework is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out attacks by replacing HTTP requests with malicious content...

7.8CVSS6.6AI score0.00677EPSS

SaveExploits1References4Affected Software3

Veracode•added 2025/10/06 4:44 p.m.•10 views

HTTP Request Smuggling

io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to incorrectly accepting standalone newline characters LF as a chunk-size line terminator instead of requiring CRLF per HTTP/1.1 standards, which allows an attacker to craft malicious requests that are...

7.5CVSS7AI score0.00677EPSS

SaveExploits1References10Affected Software1

OSV•added 2025/10/04 12:11 a.m.•10 views

RLSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

8.1CVSS8.1AI score0.5992EPSS

SaveExploits18References3

OSV•added 2025/10/04 12:11 a.m.•6 views

RLSA-2025:7256 Moderate: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: crypto/tls: panic when processing post-handshake message on QUIC connections...

7.5CVSS6.9AI score0.01952EPSS

SaveExploits0References7