Lucene search
K

24 matches found

Vulnrichment
Vulnrichment
added 2026/05/13 2:12 p.m.7 views

CVE-2026-42934 NGINX ngx_http_charset_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcharsetmodule module. When charset, sourcecharset, and charsetmap and proxypass with disabled buffering "off" directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' contr...

6.3CVSS5.9AI score0.00717EPSS
Exploits0References1
CVE
CVE
added 2026/05/13 2:12 p.m.296 views

CVE-2026-42945

CVE-2026-42945 affects NGINX Open Source and NGINX Plus via the ngx_http_rewrite_module when a rewrite/if/set directive is followed by a PCRE capture and a replacement containing a question mark. This can cause a heap buffer overflow in the worker process and, on systems with ASLR disabled, poten...

9.2CVSS6.4AI score0.23018EPSS
In wildExploits38References3Affected Software7
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.5 views

F5 NGINX Plus和F5 NGINX Open Source 安全漏洞

F5 NGINX Plus and F5 NGINX Open Source are both products of the American company F5. F5 NGINX Plus is a software-based application delivery platform. F5 NGINX Open Source is a high-performance web server, reverse proxy server, load balancer, and API gateway. Both F5 NGINX Plus and F5 NGINX Open...

9.2CVSS6.3AI score0.23018EPSS
Exploits38References5
Snyk
Snyk
added 2026/04/08 12:4 a.m.3 views

Incorrect Authorization

Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to Incorrect Authorization in the configuration for SSL certificate and key file paths due to incorrect option name checks. An attacker can gain unauthorized...

7.6CVSS5.9AI score0.00142EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/26 4:42 p.m.2 views

CVE-2026-33015

EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop StopTransaction, the EVSE can return to PrepareCharging via the EV's BCB toggle, allowing session restart. This breaks the irreversibility of remote stop and can bypass...

5.2CVSS5.9AI score0.00214EPSS
Exploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 11:21 a.m.4 views

CVE-2021-22349

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart...

7.8CVSS6.8AI score0.00689EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/07 4:23 p.m.21 views

CVE-2026-20027 Cisco Snort DCERPC Stub Data Out of Bounds Read

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...

5.3CVSS0.00567EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-23613

Malware in sbrugna...

7.8CVSS7.6AI score0.00697EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-20726

Malware in sbrugna...

6.5CVSS6.3AI score0.0154EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-9588

Malware in sbrugna...

9.3CVSS7.7AI score0.00751EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-6806

Malicious code in bioql PyPI...

9CVSS7.1AI score0.02753EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-45816

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00378EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-28242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk befo...

6.5CVSS6.4AI score0.0154EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 9:20 p.m.6 views

CVE-2021-23000

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may...

7.5CVSS6.9AI score0.00933EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/10 12:0 a.m.1 views

PT-2024-37334 · Unknown · Gaizhenbiao/Chuanhuchatgpt

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410 Description: A vulnerability allows any user to restart the server at will by sending a specific request to the "/queue/join?" endpoint with fn index:66. This unrestricted server restart capability...

9.1CVSS7.4AI score0.10849EPSS
Exploits1References7
OSV
OSV
added 2024/05/08 3:15 p.m.2 views

CVE-2024-32761

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

6.5CVSS5.7AI score0.00465EPSS
Exploits0References1
OSV
OSV
added 2023/09/25 1:15 p.m.3 views

CVE-2023-41300

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...

7.5CVSS5.8AI score0.00378EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/13 12:0 a.m.4 views

PT-2023-26910 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machine...

7.5CVSS6.9AI score0.00379EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.3 views

The vulnerability in the web interfaces of Cisco IOS and Cisco IOS XE systems allows a perpetrator to trigger a service failure or a device restart.

The vulnerability of Cisco IOS and Cisco IOS XE web interfaces is related to improper management of resources in the HTTP server code. Exploiting this vulnerability can allow a malicious actor to trigger a device restart or a service failure remotely...

8.6CVSS6.5AI score0.01078EPSS
Exploits0References2Affected Software2
OSV
OSV
added 2022/01/03 10:15 p.m.1 views

CVE-2021-39989

The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart...

7.5CVSS5.8AI score0.00655EPSS
Exploits0References1
Rows per page
Query Builder