Lucene search
+L

19120 matches found

CVE
CVE
added 2026/09/14 8:17 p.m.28 views

CVE-2026-53714

Envoy Gateway (an open-source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway) is affected by an authentication bypass in its xDS gRPC server when configured in GatewayNamespaceMode (provider.kubernetes.deploy.type=GatewayNamespace). The root cause is twof...

7.4CVSS0.00027EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:15 p.m.39 views

CVE-2026-53716

Envoy Gateway (open-source application gateway managing Envoy Proxy) has an unbounded gzip decompression vulnerability in getFileFromGZ within internal/wasm/httpfetcher.go. The function calls io.ReadAll on a gzip.Reader without limiting the decompressed output size. When a tenant-controlled Envoy...

6.5CVSS0.00044EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:14 p.m.36 views

CVE-2026-53715

Envoy Gateway (an open-source Kubernetes-based application gateway) contains a race condition in the Wasm cache: HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the mappingPath2Cache map without synchronization while HTTPServer.Get writes the same map during EnvoyExtensionPolicy transla...

5.3CVSS0.0004EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:13 p.m.40 views

CVE-2026-53719

Envoy Gateway (open-source Kubernetes application gateway) contains a nil-dereference in translateSecurityPolicyForRoute (internal/gatewayapi/securitypolicy.go) that triggers when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute while omitting spec.authorization. The result...

6.5CVSS0.00121EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:12 p.m.28 views

CVE-2026-53718

Envoy Gateway prior to 1.7.4 and 1.8.1 contains a cross-namespace authorization bypass in the custom-backend branch of internal/gatewayapi/route.go. The omitted validateBackendNamespace check allows an HTTPRoute to use an extension-managed custom backendRef to reference a backend resource in anot...

6.4CVSS0.00043EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:11 p.m.36 views

CVE-2026-53713

Envoy Gateway (an open-source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway) has an authentication bypass in its Lua validator. Prior to versions 1.7.4 and 1.8.1 , the to_absolute_normalized_path function in internal/gatewayapi/luavalidator/security.lua ...

9.1CVSS0.0004EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:09 p.m.22 views

CVE-2026-53717

Envoy Gateway (open-source Envoy Proxy management) is vulnerable in internal/wasm/imagefetcher.go prior to 1.7.4 and 1.8.1 . The function extractWasmPluginBinary allocates memory using the untrusted tar-header h.Size value (via make([]byte, h.Size)) before validating the entry name or declared si...

6.5CVSS0.00044EPSS
SaveExploits0References9
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/14 6:51 p.m.11 views

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server - Liberty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-14917)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to IBM WebSphere Application Server - Liberty Vulnerability Details CVEID:CVE-2025-14917 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application...

9.8CVSS5.4AI score0.00355EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/14 6:48 p.m.7 views

Security Bulletin: Security Vulnerability in Apache MINA affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-41409 CVE-2026-41635)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache MINA Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed...

9.8CVSS6.1AI score0.0064EPSS
SaveExploits0Affected Software1
NCSC
NCSC
added 2026/09/14 6:27 p.m.6 views

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

9.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 6:08 p.m.7 views

BlueGate-CVE-2020-0609

RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-0610 Remote Validation Tool A small check-only Python utility for remotely validating the patch behavior associated with the Microsoft Remote Desktop Gateway vulnerabilities: CVE-2020-0609 CVE-2020-0610 The vulnerabilities, commonly associate...

10CVSS6.3AI score0.74897EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/14 5:57 p.m.5 views

CVE-2019-19781

CVE-2019-19781 Exploit de Ejecución Remota de Código para Citrix Application Delivery Controller y Citrix Gateway CVE-2019-19781 Uso : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE ejemplo : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/14 5:55 p.m.8 views

CVE-2022-22947_EXP

1. Vulnerabilidad de ejecución remota de código en Spring Cloud Gateway Nivel de peligro: Alto Estado de POC/EXP: Público Número CNVD: CNNVD-2022-16402 Número CVE: CVE-2022-22947 2. Versiones afectadas: VMWare Spring Cloud Gateway 3.1.0 VMWare Spring Cloud Gateway =3.0.0, =3.0.6 VMWare Spring...

10CVSS8.1AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/14 5:49 p.m.7 views

CVE-2022-22947

CVE-2022-22947 Spring Cloud Gateway es un API gateway de Spring. En sus versiones 3.1.0 y 3.0.6 incluidas y anteriores existía una vulnerabilidad de inyección de expresiones SpEL. Cuando un atacante puede acceder a la Actuator API, puede explotar esta vulnerabilidad para ejecutar comandos...

10CVSS8.2AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/14 5:39 p.m.6 views

CVE-2023-4966-POC

CVE-2023-4966-POC Prueba de concepto para la vulnerabilidad CVE-2023-4966 de NetScaler Descripción Este script de Python explota CVE-2023-4966, una vulnerabilidad crítica en instancias de Citrix ADC que permite a atacantes no autenticados filtrar tokens de sesión. A la vulnerabilidad se le ha...

9.4CVSS7.5AI score0.99999EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/14 5:27 p.m.8 views

CVE-2024-7120

Inyección de Comandos en Dispositivos Raisecom CVE-2024-7120 ¡Prueba de concepto! Resumen Se ha identificado una vulnerabilidad de inyección de comandos en los dispositivos Gateway de RAISECOM, que afecta a los modelos MSG1200, MSG2100E, MSG2200 y MSG2300. Esta vulnerabilidad permite a atacantes...

9.8CVSS7.1AI score0.934EPSS
SaveExploits4
NVD
NVD
added 2026/09/14 5:17 p.m.3 views

CVE-2026-76461

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

9.8CVSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 5:17 p.m.3 views

CVE-2026-76440

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

9.8CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/14 5:17 p.m.2 views

CVE-2026-76442

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/14 5:17 p.m.3 views

CVE-2026-76441

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

9.8CVSS
SaveExploits0References1
Rows per page
Query Builder