Lucene search
+L

13470 matches found

OSV
OSV
added 2025/06/19 3:8 p.m.7 views

CVE-2025-49014 jq heap use after free vulnerability in f_strflocaltime

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function fstrflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication...

6.9CVSS6.7AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/06/19 3:8 p.m.21 views

CVE-2025-49014

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function fstrflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication...

6.9CVSS5.2AI score0.00321EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/06/19 12:0 a.m.8 views

PT-2025-26220

Name of the Vulnerable Software and Affected Versions jq version 1.8.0 Description A heap use after free issue exists within the function f strflocaltime of /src/builtin.c. This is a problem in a command-line JSON processor. Recommendations For version 1.8.0, consider restricting access to the f...

8.7CVSS5.6AI score0.00497EPSS
SaveExploits3References24
CVE
CVE
added 2025/06/18 9:33 a.m.29 views

CVE-2025-38046

This CVE entry is rejected/not used as stated; it does not represent an active vulnerability.

6.6AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/18 12:0 a.m.9 views

Clam AntiVirus Toolkit 1.4.3

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

9.8CVSS9.4AI score0.0159EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.12 views

The vulnerability of the command-line interface (CLI) of the PAN-OS operating system allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the command-line interface CLI of the PAN-OS operating system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary commands...

6.8CVSS6.1AI score0.00661EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2025/06/17 3:35 p.m.4 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 3:20 p.m.14 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 3:20 p.m.10 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 3:17 p.m.12 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 3:9 p.m.14 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 2:55 p.m.4 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 10:43 a.m.5 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 7:33 a.m.5 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:44 a.m.9 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:43 a.m.14 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:42 a.m.8 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:42 a.m.13 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:32 a.m.14 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:15 a.m.14 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00778EPSS
SaveExploits0References8
Rows per page
Query Builder