Lucene search
K

39 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 7:22 p.m.3 views

CVE-2026-35598

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV GetResource and GetResourcesByList methods fetch tasks by UID from the database without verifying that the authenticated user has access to the task's project. Any authenticated CalDAV user who knows or...

4.3CVSS5.9AI score0.00033EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/18 9:31 p.m.1 views

EUVD-2025-204344

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests...

8.7CVSS6.3AI score0.00167EPSS
Exploits0References3
OSV
OSV
added 2025/12/18 8:15 p.m.0 views

CVE-2023-53934

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests...

8.7CVSS5.8AI score0.00167EPSS
Exploits0References2
NVD
NVD
added 2025/12/18 8:15 p.m.2 views

CVE-2023-53934

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests...

8.7CVSS0.00167EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 7:53 p.m.2 views

CVE-2023-53934 Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests...

8.7CVSS6.5AI score0.00167EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/18 7:53 p.m.18 views

CVE-2023-53934 Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests...

8.7CVSS0.00167EPSS
Exploits0References2
CVE
CVE
added 2025/12/18 7:53 p.m.6 views

CVE-2023-53934

Kentico Xperience vulnerability CVE-2023-53934 is a denial-of-service issue tied to the GetResource handler. The trusted source set documents describe remote DoS via specially crafted requests caused by improper input validation, affecting Kentico Xperience (GetResource endpoint). Connected recor...

8.7CVSS6.5AI score0.00167EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

8.7CVSS5.8AI score0.00167EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.3 views

PT-2025-52313

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A denial of service issue exists in Kentico Xperience. Attackers can leverage this to disrupt service availability by sending specially crafted requests to the GetResource handler...

8.7CVSS6.5AI score0.00167EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-6873

Malware in sbrugna...

5CVSS6.4AI score0.00283EPSS
Exploits2References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:16 a.m.2 views

SUSE CVE-2015-5174

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web...

4.3CVSS6.8AI score0.04801EPSS
Exploits0References8
NVD
NVD
added 2022/12/27 9:15 a.m.10 views

CVE-2019-25087

A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp of the component URI Handler. The manipulation of the argument uri leads to path traversal: '../filedir'. The attack may be...

7.5CVSS0.00504EPSS
Exploits0References3
OSV
OSV
added 2022/12/27 9:15 a.m.9 views

CVE-2019-25087

A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp of the component URI Handler. The manipulation of the argument uri leads to path traversal: '../filedir'. The attack may be...

7.5CVSS7AI score
Exploits0References3
Prion
Prion
added 2022/12/27 9:15 a.m.18 views

Path traversal

A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp of the component URI Handler. The manipulation of the argument uri leads to path traversal: '../filedir'. The attack may be...

5CVSS7.6AI score0.00504EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/27 12:0 a.m.3 views

PT-2022-8299 · Unknown · Ramseyu0020Uuid Httpserver

Name of the Vulnerable Software and Affected Versions: RamseyK httpserver affected versions not specified Description: A critical issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp in the URI Handler component. The manipulation of the argument uri leads to path...

7.5CVSS7AI score0.00504EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2022/07/18 5:15 p.m.2 views

CVE-2022-32387

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...

7.5CVSS5.8AI score0.00951EPSS
Exploits0References2
OSV
OSV
added 2022/07/18 5:15 p.m.2 views

CVE-2022-32387

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...

7.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/07/18 5:15 p.m.10 views

CVE-2022-32387

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...

7.5CVSS0.00951EPSS
Exploits0References1
Prion
Prion
added 2022/07/18 5:15 p.m.15 views

Design/Logic Flaw

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...

5CVSS7.4AI score0.00951EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/07/18 4:3 p.m.16 views

CVE-2022-32387

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...

7.6AI score0.00951EPSS
Exploits0References1
Rows per page
Query Builder