Lucene search
+L

500041 matches found

Debian CVE
Debian CVE
added 6 days ago5 views

CVE-2026-29035

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS6AI score0.00467EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 6 days ago5 views

CVE-2026-29035 CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS5.8AI score0.00467EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago10 views

EUVD-2026-56944

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS5.8AI score0.00467EPSS
SaveExploits0References2
Cvelist
Cvelist
added 6 days ago28 views

CVE-2026-29035 CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS0.00467EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 6 days ago9 views

CVE-2026-29035

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS5.8AI score0.00467EPSS
SaveExploits0References3
CVE
CVE
added 6 days ago24 views

CVE-2026-29035

CVE-2026-29035 affects CivetWeb (commit 4a4f0c95) and describes a heap and stack buffer overflow in read_websocket() when both USE_ZLIB and MG_EXPERIMENTAL_INTERFACES are defined. An unauthenticated remote attacker can exploit this via compressed WebSocket frames negotiated with permessage-deflat...

8.3CVSS5.8AI score0.00467EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-56940

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS5.3AI score0.00341EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago9 views

CVE-2026-73244 kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS5.4AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 6 days ago8 views

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS5.3AI score0.00341EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 6 days ago31 views

CVE-2026-73244 kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS0.00341EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 6 days ago6 views

CVE-2026-73244 kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS5.3AI score0.00341EPSS
SaveExploits0References3
CVE
CVE
added 6 days ago24 views

CVE-2026-73244

kkFileView (Spring Boot-based) prior to version 5.0.1 suffers an unauthenticated path traversal: the POST /listFiles endpoint forwards a user-controlled path param from FileController.getFiles to Files.newDirectoryStream without constraining to the demo directory, enabling directory enumeration o...

5.3CVSS5.4AI score0.00341EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago3 views

CVE-2026-73243 kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypass

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an...

5.8CVSS5.4AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 6 days ago6 views

CVE-2026-73243

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an...

5.8CVSS5.3AI score0.00317EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 6 days ago24 views

CVE-2026-73243 kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypass

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an...

5.8CVSS0.00317EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 6 days ago5 views

CVE-2026-73243 kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypass

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an...

5.8CVSS5.3AI score0.00317EPSS
SaveExploits0References5
EUVD
EUVD
added 6 days ago9 views

EUVD-2026-56937

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an...

5.8CVSS5.3AI score0.00317EPSS
SaveExploits0References5
CVE
CVE
added 6 days ago31 views

CVE-2026-73243

kkFileView (Spring Boot-based) prior to version 5.0.1 is vulnerable to unauthenticated SSRF via GET /addTask. The issue arises because this endpoint was omitted from TrustHostFilter and TrustDirFilter in WebConfig.java, allowing FileConvertQueueTask to fetch an attacker-controlled URL after FileH...

5.8CVSS5.3AI score0.00317EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 6 days ago8 views

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

8.7CVSS5.3AI score0.00252EPSS
SaveExploits0References6
OSV
OSV
added 6 days ago3 views

CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

8.3CVSS5.4AI score0.0036EPSS
SaveExploits0References6
Rows per page
Query Builder