Lucene search
+L

2858 matches found

osv_ghsa
osv_ghsa
•added 2025/10/30 12:31 a.m.•29 views

GHSA-FG8X-Q69G-4QP3 Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•26 views

EUVD-2025-36875

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•26 views

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/10/30 12:15 a.m.•22 views

CVE-2025-10929

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.3CVSS0.00303EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•22 views

Drupal Reverse Proxy Header security vulnerability

Drupal Reverse Proxy Header is a custom HTTP header plugin for the Drupal community. A security vulnerability exists in Drupal Reverse Proxy Header version 0.0.0 through versions prior to 1.1.2, which stems from improper input consistency validation and could lead to the manipulation of user...

5.3CVSS5.6AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•8 views

CVE-2025-10929: Improper Validation of Consistency within Input

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.3CVSS5.9AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•7 views

PT-2025-45712

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.3CVSS5.9AI score0.00303EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/29 11:14 p.m.•3 views

CVE-2025-10929 Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.8AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:14 p.m.•43 views

CVE-2025-10929

The Drupal Reverse Proxy Header custom HTTP header plugin is vulnerable to an Improper Validation of Consistency within Input (CWE-1288) flaw. This vulnerability exists in versions 0.0.0 through 1.1.2 and allows for the manipulation of user-controlled variables . The impact is categorized as a pa...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2025/10/29 11:14 p.m.•20 views

CVE-2025-10929 Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/29 11:14 p.m.•39 views

CVE-2025-10929 Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

0.00303EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/16 3:02 p.m.•19 views

Security Bulletin: IBM MQ is vulnerable to Slowloris attack which is a type of denial-of-service (DoS) (CVE-2025-36128)

Summary IBM MQ is vulnerable to Slowloris attack which is a type of denial-of-service DoS. Vulnerability Details CVEID:CVE-2025-36128 DESCRIPTION: IBM MQ is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type...

7.5CVSS6.1AI score0.00543EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2025/10/15 9:14 a.m.•24 views

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

7.5CVSS6.5AI score0.0071EPSS
SaveExploits1References11
RedHat Linux
RedHat Linux
•added 2025/10/14 1:01 p.m.•13 views

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

7.5CVSS6.5AI score0.0071EPSS
SaveExploits1References11
RedHat Linux
RedHat Linux
•added 2025/10/08 2:48 p.m.•21 views

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

7.5CVSS6.5AI score0.0071EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•33 views

EUVD-2009-1929

Malware in sbrugna...

4.3CVSS6.1AI score0.02235EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-13643

Malware in sbrugna...

7.5CVSS7.3AI score0.01382EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-30219

Malware in sbrugna...

9.8CVSS8.1AI score0.01266EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-13489

Malware in sbrugna...

8.1CVSS7.5AI score0.02969EPSS
SaveExploits1References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-4115

Malware in sbrugna...

7.5CVSS6.9AI score0.03924EPSS
SaveExploits0References13
Rows per page
Query Builder