Lucene search
+L

8 matches found

Snyk
Snyk
•added 2026/06/19 7:36 p.m.•15 views

Improper Handling of Case Sensitivity

Overview jupyterlab-git is an A JupyterLab extension for version control using git Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity in the prepare function due to improper enforcement of excluded directory paths on case-insensitive filesystems. An attacker...

7.1CVSS5.9AI score0.00411EPSS
SaveExploits1References2
NVD
NVD
•added 2025/03/20 10:15 a.m.•11 views

CVE-2024-6866

corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...

7.5CVSS0.00706EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•14 views

Flask-CORS 安全漏洞

Flask-CORS is a cross-origin resource sharing component for Flask by the individual developer Cory Dolphin. A security vulnerability exists in Flask-CORS version 4.01, which stems from a case-insensitive request path matching that could lead to unauthorized cross-domain access...

7.5CVSS5.4AI score0.00706EPSS
SaveExploits1References2
OSV
OSV
•added 2021/08/05 9:15 p.m.•5 views

DEBIAN-CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

3.7CVSS6.1AI score0.0627EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2008/10/07 12:00 a.m.•38 views

Debian DSA-1645-1 : lighttpd - various

Several local/remote vulnerabilities have been discovered in lighttpd, a fast webserver with minimal memory footprint. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4298 A memory leak in the httprequestparse function could be used by remote...

7.5CVSS7.2AI score0.04345EPSS
SaveExploits2References7
Debian
Debian
•added 2008/10/06 5:29 p.m.•52 views

[SECURITY] [DSA-1645-1] New lighttpd packages fix various problems

------------------------------------------------------------------------ Debian Security Advisory DSA-1645-1 [email protected] http://www.debian.org/security/ Steve Kemp October 06, 2008 http://www.debian.org/security/faq -...

7.5CVSS6.9AI score0.04345EPSS
SaveExploits2
securityvulns
securityvulns
•added 2008/10/06 12:00 a.m.•77 views

[SECURITY] [DSA-1645-1] New lighttpd packages fix various problems

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1645-1 [email protected] http://www.debian.org/security/ Steve Kemp October 06, 2008 http://www.debian.org/security/faq -...

7.8CVSS0.04345EPSS
SaveExploits2
OSV
OSV
•added 2008/10/06 12:00 a.m.•43 views

DSA-1645-1 lighttpd - various problems

Bulletin has no description...

7.5CVSS7.4AI score0.04345EPSS
SaveExploits2
Rows per page
Query Builder