Lucene search
+L

2434 matches found

RedHat Linux
RedHat Linux
•added 2022/04/13 2:30 p.m.•18 views

urijs: Authorization Bypass Through User-Controlled Key

A flaw was found in urijs due to the fix of CVE-2021-3647 not considering case-sensitive protocol schemes in the URL. This issue allows attackers to bypass the patch...

6.5CVSS6AI score0.0158EPSS
SaveExploits1References4
Veracode
Veracode
•added 2022/02/22 6:06 a.m.•39 views

Authorization Bypass

url-parse is vulnerable to authorization bypass. The vulnerability exists because the protocol of the URL returned by the parser is not validated correctly, allowing an attacker to bypass URLs via \b characters and the user-controlled key...

9.8CVSS5.6AI score0.0222EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2022/02/21 9:15 a.m.•8 views

DEBIAN-CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS7.1AI score0.0222EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/21 9:15 a.m.•9 views

CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS7AI score0.0222EPSS
SaveExploits1References5
NVD
NVD
•added 2022/02/21 9:15 a.m.•24 views

CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS0.0222EPSS
SaveExploits1References4
Prion
Prion
•added 2022/02/21 9:15 a.m.•25 views

Authorization

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

7.5CVSS9.2AI score0.0222EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2022/02/21 9:15 a.m.•46 views

CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS6.9AI score0.0222EPSS
SaveExploits1References4
OSV
OSV
•added 2022/02/21 9:15 a.m.•11 views

UBUNTU-CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS7.3AI score0.0222EPSS
SaveExploits1References5
Veracode
Veracode
•added 2022/02/21 6:18 a.m.•33 views

Authorization Bypass

url-parse is vulnerable to authorization bypass. Because the library does not properly validate the hostname in the toString function of index.js, an attacker can redirect to malicious URLs using the user-controlled key when no port number is specified in the URL...

9.1CVSS2.5AI score0.01827EPSS
SaveExploits1References5Affected Software2
Github Security Blog
Github Security Blog
•added 2022/02/21 12:00 a.m.•131 views

Authorization Bypass Through User-Controlled Key in url-parse

url-parse prior to version 1.5.8 is vulnerable to Authorization Bypass Through User-Controlled Key...

9.1CVSS3.9AI score0.01827EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2022/02/21 12:00 a.m.•50 views

GHSA-HGJH-723H-MX2J Authorization Bypass Through User-Controlled Key in url-parse

url-parse prior to version 1.5.8 is vulnerable to Authorization Bypass Through User-Controlled Key...

9.1CVSS8AI score0.01827EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/02/21 12:00 a.m.•53 views

CVE-2022-0691 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

6.5CVSS9.5AI score0.0222EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2022/02/21 12:00 a.m.•103 views

CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS8AI score0.0222EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/21 12:00 a.m.•4 views

CVE-2022-0691: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS7.2AI score0.0222EPSS
SaveExploits1References3
OSV
OSV
•added 2022/02/21 12:00 a.m.•30 views

CVE-2022-0691 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

6.5CVSS7.7AI score
SaveExploits0References6
OSV
OSV
•added 2022/02/20 1:15 p.m.•12 views

DEBIAN-CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS7.1AI score0.01827EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/20 1:15 p.m.•14 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS7AI score0.01827EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/02/20 1:15 p.m.•44 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS6.9AI score0.01827EPSS
SaveExploits1References5
OSV
OSV
•added 2022/02/20 1:15 p.m.•15 views

UBUNTU-CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS7.3AI score0.01827EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2022/02/20 12:00 a.m.•65 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS7.8AI score0.01827EPSS
SaveExploits1
Rows per page
Query Builder