Lucene search
+L

2577 matches found

OSV
OSV
added 2023/11/03 8:15 a.m.5 views

ALPINE-CVE-2023-46848

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input...

7.5CVSS7.1AI score0.10221EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/03 8:15 a.m.9 views

UBUNTU-CVE-2023-46848

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input...

8.6CVSS5.8AI score0.10221EPSS
SaveExploits0References6
OSV
OSV
added 2023/11/01 3:15 a.m.5 views

CVE-2023-5516

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical detai...

5.3CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/01 2:54 a.m.33 views

CVE-2023-5516

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical detai...

5.3CVSS5.6AI score0.00377EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/10/31 2:36 a.m.6 views

SUSE CVE-2019-0980

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

7.5CVSS6.2AI score0.04943EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:36 a.m.2 views

SUSE CVE-2019-0981

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980...

7.5CVSS6.2AI score0.04943EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:36 a.m.5 views

SUSE CVE-2019-1301

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

7.5CVSS6.8AI score0.0533EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.5 views

SUSE CVE-2020-1108

unknown...

7.5CVSS7.3AI score0.06255EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.4 views

SUSE CVE-2020-1161

unknown...

7.5CVSS7.3AI score0.05142EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.5 views

SUSE CVE-2020-0602

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'...

7.5CVSS6.8AI score0.07614EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/26 12:00 a.m.10 views

Sielco Analog FM Transmitters Cross-Site Request Forgery Vulnerability

Sielco Analog FM Transmitters is an analog FM transmitter from Sielco. A security vulnerability exists in Sielco Analog FM Transmitters that originates from allowing a user to perform certain actions via an HTTP request without performing any validity checks to validate the request...

8.8CVSS6.8AI score0.00239EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2023/10/25 12:00 a.m.8 views

Twisted Environmental Issues Vulnerability

Twisted is an event-driven open source web engine written in the Python language. A security vulnerability exists in versions prior to Twisted 23.10.0rc1, which stems from the fact that when multiple HTTP requests are sent in a single TCP packet, twisted.web processes the requests asynchronously...

5.3CVSS6.8AI score0.00766EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:00 a.m.10 views

The vulnerability of the centralized management of Fortinet FortiManager devices and FortiAnalyzer network firewalls arises from insufficient validation of incoming requests, allowing attackers to disclose protected information.

The vulnerability of Fortinet’s FortiManager device management system and FortiAnalyzer network monitoring system lies in the insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially crafted HTTP reque...

6.5CVSS6.5AI score0.01221EPSS
SaveExploits1References5Affected Software2
CNNVD
CNNVD
added 2023/10/20 12:00 a.m.9 views

Fortinet FortiAnalyzer Code Issue Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is primarily used to collect network log data and analyze, report, and archive security events, network traffic, and Web content in the logs through the Reporting...

6.5CVSS6.5AI score0.01221EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/10/19 12:00 a.m.11 views

PT-2023-29711 · Unknown · Artifact Hub

Name of the Vulnerable Software and Affected Versions: Artifact Hub versions prior to 1.16.0 Description: Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. It includes a fine-grained authorization mechanism that...

5.3CVSS7.3AI score0.00519EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2023/10/19 12:00 a.m.2 views

PT-2023-7040 · Squid +8 · Squid +9

Name of the Vulnerable Software and Affected Versions: Squid affected versions not specified Description: The issue allows a remote attacker to perform a Denial of Service by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input. This can lead to a...

9.3CVSS7.7AI score0.88864EPSS
SaveExploits1References117
BDU FSTEC
BDU FSTEC
added 2023/10/18 12:00 a.m.9 views

The vulnerability of the Sangfor NGAF firewall lies in its ability to bypass the authentication mechanism, allowing attackers to circumvent the authentication process.

The vulnerability of the Sangfor NGAF firewall lies in its ability to bypass the authentication mechanism. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process by using specially crafted HTTP requests and a specially created Y-forwarded-for header...

10CVSS6.9AI score0.18206EPSS
SaveExploits1References6Affected Software1
CNNVD
CNNVD
added 2023/10/17 12:00 a.m.8 views

IBM Security Verify Privilege Manager Security Vulnerability

IBM Security Verify Privilege Manager is a security management software from International Business Machines IBM for endpoint privilege management and application control in corporate environments. The software stops unintentional downloads of malware and ransomware from attacking applications by...

5.3CVSS6.1AI score0.00531EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/16 12:00 a.m.13 views

PT-2023-28705 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 22.7 Extreme Networks Switch Engine EXOS versions prior to 31.7.1 Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Description: An issue in Extreme Networks Switch Engine EXO...

8.8CVSS7.5AI score0.00715EPSS
SaveExploits0References7
OSV
OSV
added 2023/10/13 3:15 p.m.7 views

CVE-2023-41680

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.1, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all...

6.1CVSS5.9AI score0.00481EPSS
SaveExploits0References1
Rows per page
Query Builder