Lucene search
+L

903 matches found

OSV
OSV
added 2026/02/26 12:55 a.m.11 views

CVE-2026-27887 Spin has memory leaks in various WIT interfaces

Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...

6.9CVSS5.8AI score
SaveExploits0References3
Redos
Redos
added 2026/02/24 12:0 a.m.12 views

ROS-20260224-73-0002

A vulnerability in the TLS 1.3 protocol implementation of NGINX Plus and NGINX Open Source web servers is related to a flaw in the authentication procedure. Exploitation of the vulnerability may allow an intruder acting remotely to gain unauthorized access to protected information...

5.3CVSS5.3AI score0.02741EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/02/09 12:0 a.m.18 views

Yokogawa FAST/TOOLS 安全漏洞

Yokogawa FAST/TOOLS is a real-time operation management and visualization software developed by Yokogawa Electric Corporation. There are security vulnerabilities in the Yokogawa FAST/TOOLS R9.01 version up to R10.04. These vulnerabilities stem from the use of weak encryption algorithms, which may...

8.8CVSS5.7AI score0.00166EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:41 a.m.25 views

CVE-1999-0279

Excite for Web Servers EWS allows remote command execution via shell metacharacters...

7.5CVSS7.5AI score0.03919EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:38 a.m.19 views

CVE-1999-0286

In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages...

10CVSS7AI score0.0199EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/01/01 9:19 a.m.20 views

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted Internet of Things IoT devices and web applications to enroll them into a botnet known as RondoDox. As of December 2025, the activity has been observed leveraging the recently disclosed...

10CVSS8.1AI score0.99999EPSS
SaveExploits441
BDU FSTEC
BDU FSTEC
added 2025/11/18 12:0 a.m.7 views

The vulnerability in the Rack::Multipart::Parser class of the module interface between web servers and Rack web applications allows a attacker to cause a service failure.

The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00868EPSS
SaveExploits0References14Affected Software10
Fedora
Fedora
added 2025/11/13 1:23 a.m.10 views

[SECURITY] Fedora 41 Update: rubygem-rack-2.2.21-1.fc41

Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a single...

7.5CVSS7.1AI score0.35376EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2025/11/07 12:0 a.m.6 views

The vulnerability of the Rack::Multipart::Parser class in the module interface between web servers and Rack web applications allows a attacker to cause a service failure.

The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00523EPSS
SaveExploits0References14Affected Software10
Packet Storm News
Packet Storm News
added 2025/10/20 12:0 a.m.14 views

WhatWeb Scanner 0.6.3

WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...

7.5AI score
SaveExploits0
OSV
OSV
added 2025/10/09 10:22 p.m.7 views

GHSA-FHW8-8V9P-7JP7 BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

Summary Various issues in bbot's unarchive.py allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution RCE. Impact A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system...

9.6CVSS8AI score0.00664EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-19542

Malware in sbrugna...

7.5CVSS7.6AI score0.02423EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-19516

Malware in sbrugna...

6.1CVSS6.2AI score0.00864EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-1999-1052

Malware in sbrugna...

7.2CVSS6.4AI score0.00352EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.30 views

EUVD-2002-0281

Malware in sbrugna...

2.6CVSS6.4AI score0.00852EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-1999-0173

Malware in sbrugna...

5CVSS6.4AI score0.04923EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2015-6955

Malware in sbrugna...

5.8CVSS9.3AI score0.01628EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-1999-0286

Malware in sbrugna...

10CVSS6.4AI score0.0199EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2011-0185

Malware in sbrugna...

5CVSS6.4AI score0.01717EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-1943

Malware in sbrugna...

10CVSS9.5AI score0.01927EPSS
SaveExploits0References3
Rows per page
Query Builder