Lucene search
+L

516 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-5398

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.01456EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2022-51669

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00805EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-1899

Malicious code in bioql PyPI...

7.5CVSS6.8AI score0.01357EPSS
SaveExploits1References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-51671

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00541EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2022-43119

Malicious code in bioql PyPI...

7.7CVSS6.7AI score0.00752EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2022-51431

Malicious code in bioql PyPI...

5.5CVSS5.7AI score0.00707EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-42021

Malicious code in bioql PyPI...

9.8CVSS7.9AI score0.00748EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-1215

Malicious code in bioql PyPI...

7.5CVSS6.9AI score0.24622EPSS
SaveExploits0References58
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-23882

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00595EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/09/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-57752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization A...

6.2CVSS5AI score0.00347EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/31 10:29 p.m.•13 views

CVE-2025-57752

A cache key confusion vulnerability in Next.js Image Optimization API could cause header-dependent images e.g., using Cookie or Authorization to be incorrectly cached and served to unauthorized users. Binary-Affected: Next.js Upstream-version-introduced: v14.2.30 Upstream-version-fixed: v15.4.5 a...

6.2CVSS6.4AI score0.00347EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•6 views

CVE-2025-57752: Use of Cache Containing Sensitive Information

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers such as Cookie or...

6.2CVSS5.7AI score0.00347EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/06 9:31 p.m.•18 views

GHSA-VH9X-PHQ6-FX54 Duplicate Advisory: Denial of service via malicious preflight requests in github.com/rs/cors

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mh55-gqvf-xfwm. This link is maintained to preserve external references. Original Description Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include ...

6.9CVSS6.2AI score
SaveExploits0References5
NVD
NVD
•added 2025/08/06 9:15 p.m.•15 views

CVE-2025-47908

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS0.00595EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/06 9:15 p.m.•20 views

UBUNTU-CVE-2025-47908

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS6.6AI score0.00595EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/08/06 8:41 p.m.•24 views

CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

0.00595EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/06 8:41 p.m.•18 views

CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS6.9AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/08/06 8:41 p.m.•12 views

CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

6.3AI score0.00595EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/06 8:41 p.m.•76 views

CVE-2025-47908

The github.com/rs/cors middleware is vulnerable to a denial of service (DoS) attack. An attacker can send malicious preflight requests containing an Access-Control-Request-Headers (ACRH) header with a large number of commas, triggering a prohibitive amount of heap allocations . This resource exha...

7.5CVSS7AI score0.00595EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•8 views

CVE-2025-47908: Undefined Security Weakness

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS5.8AI score0.00595EPSS
SaveExploits0References1
Rows per page
Query Builder