Lucene search
+L

348 matches found

Cvelist
Cvelist
added 2023/11/27 2:31 a.m.36 views

CVE-2023-6313 SourceCodester URL Shortener Long URL cross site scripting

A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Long URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has be...

4CVSS6.2AI score0.00612EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/11/27 2:31 a.m.13 views

CVE-2023-6313 SourceCodester URL Shortener Long URL cross site scripting

A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Long URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has be...

4CVSS6.2AI score0.00612EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/11/27 12:00 a.m.8 views

PT-2023-32613 · Sourcecodester · Sourcecodester Url Shortener

Name of the Vulnerable Software and Affected Versions: SourceCodester URL Shortener version 1.0 Description: A vulnerability was found in the Long URL Handler component, which can be exploited to lead to cross site scripting. The attack can be launched remotely. Recommendations: For SourceCodeste...

6.1CVSS6.2AI score0.00612EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2023/03/28 12:00 a.m.37 views

SUSE: Security Advisory (SUSE-SU-2023:0764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.84508EPSS
SaveExploits5References7
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.9 views

SUSE CVE-2004-0110

Buffer overflow in the 1 nanohttp or 2 nanoftp modules in XMLSoft Libxml 2 Libxml2 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL...

7.5CVSS8.3AI score0.24232EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.10 views

SUSE CVE-2004-0785

Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 Rich Text Format RTF messages, 2 a long hostname for the local system as obtained from DNS, or 3 a long URL that is not properly handled by the URL decoder...

7.5CVSS7.8AI score0.05427EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.7 views

SUSE CVE-2006-4089

Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service application crash, or have other unknown impact, via 1 a long Location field sent by a web server, which triggers an overflow in the reconnect function in...

5CVSS7.4AI score0.11082EPSS
SaveExploits2References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.9 views

SUSE CVE-2007-0774

Stack-based buffer overflow in the mapuritoworker function native/common/jkuriworkermap.c in modjk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a...

7.5CVSS8.4AI score0.81513EPSS
SaveExploits9References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:34 a.m.8 views

SUSE CVE-2013-6478

gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service application crash via a long URL that is examined with a tooltip...

4.3CVSS6.8AI score0.03845EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2022/12/22 12:00 a.m.96 views

CVE-2022-36317

When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Service.This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 103...

6.5CVSS6.1AI score0.00467EPSS
SaveExploits0
OSV
OSV
added 2022/05/17 12:15 a.m.148 views

GHSA-3F57-W2RP-72FC Undertow Uncaught Exception vulnerability

A long URL proxy request lead to java.nio.BufferOverflowException in Undertow...

5.9CVSS5.7AI score0.0248EPSS
SaveExploits0References6
OSV
OSV
added 2022/04/30 6:17 p.m.13 views

GHSA-2W2W-CV3H-RR38 Apache Tomcat Reveals Path through Long URL

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension...

6.9CVSS6.4AI score0.08176EPSS
SaveExploits0References11
OSV
OSV
added 2022/04/27 4:15 p.m.10 views

CVE-2021-34587

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5.3CVSS5.8AI score0.00901EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/27 4:15 p.m.25 views

Stack overflow

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5CVSS5.2AI score0.00901EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2022/04/27 3:15 p.m.39 views

CVE-2021-34587 Bender Charge Controller: Long URL could lead to webserver crash

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5.3CVSS5.5AI score0.00901EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/03 12:00 a.m.50 views

c-http has an unspecified vulnerability

C-Http is an open source, Http 1.1 WebServer written in C by Marcin Dłubakowski, a Polish individual developer. yotsuyaNight c-http v0.1.0 version has a security vulnerability stemming from a problem with the length of the url in the software's handling of the delimitedread function, which an...

7.5CVSS2.1AI score0.00978EPSS
SaveExploits1References1
NVD
NVD
added 2021/11/02 6:15 p.m.35 views

CVE-2020-21574

Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function...

7.5CVSS0.00978EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/02 6:15 p.m.10 views

CVE-2020-21574

Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function...

7.5CVSS5.8AI score0.00978EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/11/02 5:45 p.m.40 views

CVE-2020-21574

Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function...

7.5AI score0.00978EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/11 4:15 p.m.8 views

CVE-2021-23253

Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part e.g. www.safe.opera.com… The exac...

5.3CVSS5.8AI score0.00751EPSS
SaveExploits0References1
Rows per page
Query Builder