Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-14634

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.0029EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-47482

Malicious code in bioql PyPI...

6.5CVSS7AI score0.00297EPSS
Exploits0References1
OSV
OSV
added 2025/05/28 11:59 a.m.7 views

BIT-VARNISH-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries...

5.4CVSS6.6AI score0.0029EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/05/16 2:52 a.m.2 views

SUSE CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries...

5.4CVSS7AI score0.0029EPSS
Exploits0References5
NVD
NVD
added 2025/05/13 10:15 p.m.24 views

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries...

5.4CVSS0.0029EPSS
Exploits0References3
OSV
OSV
added 2025/05/13 10:15 p.m.14 views

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries...

6.7AI score
Exploits0References3
Cvelist
Cvelist
added 2025/05/13 12:0 a.m.12 views

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries...

5.4CVSS0.0029EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/05/13 12:0 a.m.11 views

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries...

5.4CVSS5.9AI score0.0029EPSS
Exploits0
NVD
NVD
added 2024/07/01 3:15 p.m.13 views

CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS0.00297EPSS
Exploits0References1
OSV
OSV
added 2024/07/01 3:15 p.m.1 views

UBUNTU-CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS7.3AI score0.00297EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/07/01 3:15 p.m.17 views

CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS7.2AI score0.00297EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/01 2:40 p.m.19 views

CVE-2024-6375 Missing authorization check may lead to shard key refinement

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

5.4CVSS0.00297EPSS
Exploits0References1
Rows per page
Query Builder