Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-8736

Malicious code in bioql PyPI...

5.1CVSS6.6AI score0.00384EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8737

Malicious code in bioql PyPI...

5.1CVSS6.6AI score0.00484EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/02 10:43 a.m.17 views

CVE-2025-3027

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially...

5.1CVSS7.1AI score0.00384EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/02 10:42 a.m.14 views

CVE-2025-3026

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his...

5.1CVSS7.1AI score0.00484EPSS
Exploits0References3
NVD
NVD
added 2025/03/31 11:15 a.m.12 views

CVE-2025-3026

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his...

6.1CVSS0.00484EPSS
Exploits0References1
CVE
CVE
added 2025/03/31 10:31 a.m.54 views

CVE-2025-3027

Concrete details show an open redirect in EJBCA 8.0 Enterprise due to a PATH/URL modification that causes the server to redirect to an external page, enabling potential phishing. Affected component: EJBCA service; vulnerability type: open redirect; impact: misdirection to malicious sites. Exploit...

6.1CVSS6.5AI score0.00384EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/31 10:30 a.m.11 views

CVE-2025-3026 Improper Neutralization of Special Elements vulnerability in EJBCA

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his...

5.1CVSS0.00484EPSS
Exploits0References1
CVE
CVE
added 2025/03/31 10:30 a.m.63 views

CVE-2025-3026

CVE-2025-3026 affects the EJBCA service, specifically version 8.0 Enterprise (not tested in higher versions). The issue arises from modifying the HTTP Host header, which lets an attacker manipulate generated links and redirect clients to a user-controlled base URL, potentially causing the client ...

6.1CVSS6.4AI score0.00484EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder