Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-41322

@astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resources from astro path with an incorrect/malformed if-match header returns a 500 error with a one year cache lifetime instead of 412 in some cases. This has the effect that all...

5.3CVSS5.3AI score0.00056EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-52529

Malicious code in bioql PyPI...

6.5CVSS6.9AI score0.00109EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2025/06/23 12:0 a.m.13 views

Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2025-1043)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1043 advisory. When curl is asked to use HSTS, the expiry time for a subdomain mightoverwrite a parent domain's cache entry, making it end sooner or later thanotherwise intended. This affects curl using applications...

6.5CVSS6.6AI score0.00745EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/01/09 12:0 a.m.20 views

Amazon Linux 2 : curl (ALAS-2025-2724)

The version of curl installed on the remote host is prior to 8.3.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2724 advisory. When curl is asked to use HSTS, the expiry time for a subdomain mightoverwrite a parent domain's cache entry, making it end sooner or...

6.5CVSS6.7AI score0.00745EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2024/11/07 4:5 a.m.1 views

SUSE CVE-2024-9681

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...

5.3CVSS6.9AI score0.00745EPSS
Exploits1References9
NVD
NVD
added 2023/08/02 1:15 p.m.16 views

CVE-2023-26438

External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use TOCTOU weakness, involving the JDK DNS cache. Attackers that were timing DNS cache expiry correctly were able to inject configuration that would bypass existing network deny-lists. Attackers could...

4.3CVSS4.6AI score0.00029EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2012/09/05 12:0 a.m.25 views

Fedora 17 : gnome-keyring-3.4.1-3.fc17 (2012-12368)

GPG agent did not respect cache expiry settings. Backported patch to fix this issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

4.4CVSS5.4AI score0.00067EPSS
Exploits1References3
Rows per page
Query Builder