Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-44501

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

7.1CVSS5.5AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2026/05/14 4:16 p.m.5 views

CVE-2026-44501

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

7.1CVSS0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/14 3:41 p.m.6 views

CVE-2026-44501

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

4.3CVSS5.8AI score0.00042EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/05/14 3:41 p.m.31 views

CVE-2026-44501 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

4.3CVSS0.00042EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/14 3:41 p.m.4 views

CVE-2026-44501 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

4.3CVSS5.8AI score0.00042EPSS
Exploits0References1
securityvulns
securityvulns
added 2007/07/04 12:0 a.m.24 views

Buffer overflow in HP Instant Support Driver Check (SDD) ActiveX control

John Heasman of NGSSoftware has discovered a high risk vulnerability in the HP Instant Support Driver Check SDD ActiveX control, which is marked safe for scripting. The vulnerability affects the following version of the SDD control: HP Instant Support Driver Check versions prior to 1.5.0.3 This...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/18 12:0 a.m.19 views

Mozilla Firefox 1.5.x < 1.5.0.3 Multiple Vulnerabilities

Binary data 3531.prm...

5.1CVSS7.3AI score0.5731EPSS
Exploits1References2
Rows per page
Query Builder