Lucene search
+L

130 matches found

RedHat Linux
RedHat Linux
added 2025/12/11 1:44 p.m.7 views

curl: libcurl: Curl out of bounds read for cookie path

An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site...

7.5CVSS5.8AI score0.01301EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2025/12/11 1:25 p.m.4 views

curl: libcurl: Curl out of bounds read for cookie path

An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site...

7.5CVSS5.8AI score0.01301EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2025/12/11 1:0 p.m.6 views

curl: libcurl: Curl out of bounds read for cookie path

An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site...

7.5CVSS5.8AI score0.01301EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.2 views

EulerOS 2.0 SP11 : curl (EulerOS-SA-2025-2478)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname,...

7.5CVSS6.2AI score0.01301EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.5 views

EulerOS 2.0 SP11 : curl (EulerOS-SA-2025-2459)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname,...

7.5CVSS6.2AI score0.01301EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/12/10 4:27 p.m.6 views

curl: libcurl: Curl out of bounds read for cookie path

An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site...

7.5CVSS5.8AI score0.01301EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/12/09 6:30 p.m.6 views

EUVD-2025-201898

An XSS vulnerability in pxcDot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS5.8AI score0.09765EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/09 4:17 p.m.7 views

CVE-2025-41748

An XSS vulnerability in pxcDot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS5.8AI score0.09765EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 8:8 a.m.5 views

CVE-2025-41749 Reflected XSS vulnerability in port_util.php

An XSS vulnerability in portutil.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS5.9AI score0.00653EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 8:7 a.m.31 views

CVE-2025-41751 Reflected XSS vulnerability in pxc_portCntr.php

An XSS vulnerability in pxcportCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS0.09765EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.12 views

EulerOS 2.0 SP10 : curl (EulerOS-SA-2025-2410)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname,...

7.5CVSS6.4AI score0.01301EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.8 views

EulerOS 2.0 SP10 : curl (EulerOS-SA-2025-2382)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname,...

7.5CVSS6.4AI score0.01301EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.8 views

EulerOS 2.0 SP12 : curl (EulerOS-SA-2025-2351)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname,...

7.5CVSS6.4AI score0.01301EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-27114

Malware in sbrugna...

6.8CVSS5.7AI score0.00972EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-10244

Malware in sbrugna...

4.3CVSS4.9AI score0.01159EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2017-18423

Malware in sbrugna...

5.3CVSS5.6AI score0.01283EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-7351

Malware in sbrugna...

5CVSS6.4AI score0.01196EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-5567

Malware in sbrugna...

7.5CVSS7.6AI score0.01845EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-17251

Malware in sbrugna...

5.3CVSS5.5AI score0.00926EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987455 advisory. 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear...

7.5CVSS6.3AI score0.01301EPSS
SaveExploits1References4
Rows per page
Query Builder