Lucene search
+L

6 matches found

EUVD
EUVD
added 2 days ago8 views

EUVD-2026-61142

kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denial of service when an operation declares a content parameter whose application/json media type has no schema. In...

5.3CVSS5.2AI score0.00507EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/24 10:39 p.m.20 views

kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema

| Field | Value | |---|---| | Ecosystem | Go | | Package | github.com/getkin/kin-openapi | | Affected versions | = 0.143.0 introduced in v0.2.0, PR 90, 2019-05-07; reproduced on HEAD 30e2923 | | Patched versions | 0.144.0 | --- Summary openapi3filter.ValidateRequest contains a...

5.3CVSS5.5AI score0.00507EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/24 12:0 a.m.4 views

PT-2026-76594

Name of the Vulnerable Software and Affected Versions kin-openapi versions 0.2.0 through 0.143.0 Description An unauthenticated remote denial of service exists when the openapi3filter.ValidateRequest function processes an operation that declares a content parameter where the application/json medi...

5.3CVSS5.4AI score0.00507EPSS
SaveExploits0References6
Veracode
Veracode
added 2023/09/20 8:38 a.m.34 views

Weak Authentication

org.eclipse.jetty, jetty-openid is vulnerable to Weak Authentication. The vulnerability is caused by a logical programming defect in the validateRequest function in the OpenIdAuthenticator.java class which allows current requests to still proceed even when LoginService does return that the...

4.3CVSS6.9AI score0.00759EPSS
SaveExploits1References10Affected Software2
CVE
CVE
added 2008/08/27 8:0 p.m.90 views

CVE-2008-3842

ASP.NET ValidateRequest filters in the Microsoft .NET Framework are vulnerable to bypass and enable cross-site scripting (XSS) when the MS07-040 update is not applied. The issue affects the request validation mechanism (ValidateRequest) used to filter user input, exemplified by a dangerous query ...

4.3CVSS5.8AI score0.20421EPSS
SaveExploits0References4Affected Software1
securityvulns
securityvulns
added 2008/08/25 12:0 a.m.197 views

PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Microsoft .NET framework comes with a request validation feature, configurable by the ValidateRequest setting. ValidateRequest has been a feature of ASP.NET since version 1.1. This feature consists of a series of filters, designed to prevent class...

0.6AI score
SaveExploits0
Rows per page
Query Builder