Lucene search
K

82 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-3243

Malware in sbrugna...

4.3CVSS6.4AI score0.00465EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-4645

Malware in sbrugna...

7.2CVSS6.4AI score0.00048EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-1359

Malware in sbrugna...

7.5CVSS7.6AI score0.01845EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/09/04 11:22 p.m.1 views

SUSE CVE-2025-55162

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through 1.33.6, 1.34.0 through 1.34.4 and 1.35.0, insufficient Session Expiration in the Envoy OAuth2 filter leads to failed logout operations. Whe...

8.8CVSS6.8AI score0.00011EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:2 a.m.5 views

CVE-2024-28033

OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using WebProxy...

7.3CVSS8AI score0.00561EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:29 p.m.5 views

CVE-2002-1999

HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests...

5CVSS7.1AI score0.00457EPSS
Exploits0References1
NVD
NVD
added 2024/03/26 10:15 a.m.10 views

CVE-2024-28033

OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using WebProxy...

7.3CVSS7.6AI score0.00561EPSS
Exploits0References1
CVE
CVE
added 2024/03/26 9:34 a.m.47 views

CVE-2024-28033

CVE-2024-28033 affects WebProxy versions 1.7.8 and 1.7.9, exposing an OS command injection vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands with the web server’s privileges. The issue stems from a vulnerability in WebProxy itself, with the developer report...

7.3CVSS7.8AI score0.00561EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 9:34 a.m.15 views

CVE-2024-28033

OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using WebProxy...

7.9AI score0.00561EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/26 9:34 a.m.21 views

CVE-2024-28033

OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using WebProxy...

7.8AI score0.00561EPSS
Exploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/26 5:19 a.m.2 views

WebProxy vulnerable to OS command injection

Overview WebProxy provided by LunarNight Laboratory according to the original report submitted by the reporter is software to build a proxy server. WebProxy contains an OS command injection vulnerability CWE-78. During the meeting of Committee for authorizing the disclosure of unresolved...

7.3CVSS7.6AI score0.00561EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/26 12:0 a.m.2 views

PT-2024-22225 · Webproxy · Webproxy

Name of the Vulnerable Software and Affected Versions: WebProxy versions 1.7.8 through 1.7.9 Description: An OS command injection issue exists, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Recommendations: For...

7.3CVSS8.1AI score0.00561EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.1 views

LunarNight Laboratory WebProxy 安全漏洞

Lunarnight Laboratory LunarNight Laboratory WebProxy is a perl script for web proxies from Lunarnight Laboratory Vietnam. A security vulnerability exists in LunarNight Laboratory WebProxy versions 1.7.8 through 1.7.9 that originates from a vulnerability that could allow an unauthenticated, remote...

7.3CVSS7.7AI score0.00561EPSS
Exploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/25 12:0 a.m.27 views

JVN#22376992: WebProxy vulnerable to OS command injection

WebProxy provided by LunarNight Laboratory according to the original report submitted by the reporter is software to build a proxy server. WebProxy contains an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed with the privilege of the running web server...

7.3CVSS7.4AI score0.00561EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/10/10 12:0 a.m.22 views

Fortinet Fortigate Webproxy process DoS (FG-IR-23-184)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-184 advisory. - A use after free vulnerability CWE-416 in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiPro...

5.3CVSS5.7AI score0.00402EPSS
Exploits0References2
OSV
OSV
added 2023/08/16 10:15 p.m.0 views

CVE-2023-20232

A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected device. This vulnerability is due to improper input validation of HTTP requests. An attacker could...

5.3CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/08/16 10:15 p.m.13 views

Input validation

A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected device. This vulnerability is due to improper input validation of HTTP requests. An attacker could...

5CVSS5.3AI score0.0014EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/16 9:39 p.m.13 views

CVE-2023-20232

A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected device. This vulnerability is due to improper input validation of HTTP requests. An attacker could...

5.3CVSS5.6AI score0.0014EPSS
Exploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:0 a.m.17 views

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

Directory traversal vulnerability in the TS WebProxy TSWbPrxy component in Microsoft Windows allows remote attackers to escalate privileges...

9.3CVSS6.4AI score0.92094EPSS
In wildExploits5
CNVD
CNVD
added 2018/03/28 12:0 a.m.1 views

WebProxy Path Traversal Vulnerability

WebProxy is a suite of software for creating proxy servers. A path traversal vulnerability exists in WebProxy version 1.7.8. An attacker can exploit this vulnerability to read arbitrary files...

7.5CVSS6.8AI score0.01845EPSS
Exploits0References1
Rows per page
Query Builder