Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-1999-0273

Malware in sbrugna...

5CVSS6.4AI score0.00504EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2001-1325

Malware in sbrugna...

7.5CVSS6.4AI score0.02142EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-0791

Malware in sbrugna...

6.4CVSS6.4AI score0.00329EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-3689

Malware in sbrugna...

5CVSS6.1AI score0.00377EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-22332

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00252EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/07/24 12:23 a.m.4 views

CVE-2025-51860

Stored Cross-Site Scripting XSS in TelegAI telegai.com 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SVG XSS payloads in either description, greeting, example dialog, or system...

6.1CVSS5.2AI score0.00252EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2024/06/08 12:0 a.m.1 views

PT-2024-35360

Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.0 Description: The issue allows HTTP request smuggling in some configurations because '0' characters at the end of header names are ignored. For example, a "Transfer-Encoding0: chunked" header is treated th...

8.4CVSS7.6AI score0.00472EPSS
Exploits3References152
Vulnrichment
Vulnrichment
added 2023/01/20 12:0 a.m.4 views

CVE-2022-45540

EyouCMS = 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char...

6.5AI score0.00215EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/04/11 8:20 p.m.4 views

CVE-2022-24832 Bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernames

GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD Server fails to correctly escape special characters when using the username to construct LDAP queries. While this does not directly allow arbitrary LDAP data exfiltration, it ca...

8.2CVSS8.3AI score0.01597EPSS
Exploits0References8
OSV
OSV
added 2018/10/26 6:47 p.m.13 views

MGASA-2018-0411 Updated ruby packages fix security vulnerability

Ruby before 2.2.10 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick CVE-2017-17742. Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10 might allow...

9.8CVSS7AI score0.0421EPSS
Exploits0References11
securityvulns
securityvulns
added 2004/06/11 12:0 a.m.28 views

HP-UX FTP code execution

It's possiblt to execute application on server by specifing '|' in filename...

1.9AI score
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2000/07/21 12:0 a.m.31 views

Roxen WebServer 2.0.x - '%00' Request File/Directory Disclosure

source: https://www.securityfocus.com/bid/1510/info If a request containing the null character %00 is made to the Roxen Web Server, the server will return directory contents, and the source of unparsed scripts and html pages. For example, a request to http://www.server.com/%00 Will return the...

7.4AI score
Exploits0
Rows per page
Query Builder