Lucene search
K

9 matches found

EUVD
EUVD
added 2026/01/24 1:50 a.m.3 views

EUVD-2026-4601

C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's...

7.5CVSS5.8AI score0.00035EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/24 1:50 a.m.2 views

CVE-2026-24469 C++ HTTP Server has Critical Path Traversal Vulnerability in RequestHandler Allowing Arbitrary File Read

C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's...

7.5CVSS6AI score0.00035EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 11:31 p.m.10 views

CVE-2025-1890 shishuocms ManageUpLoadAction.java handleRequest unrestricted upload

A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be...

6.5CVSS0.0021EPSS
Exploits1References4
OSV
OSV
added 2024/07/19 11:15 a.m.2 views

CVE-2024-5977

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.13.0 via the 'handleRequest' function due to missing validation on a user controlled key. This makes it possible for authenticated...

5.4CVSS5.9AI score
Exploits0References3
NVD
NVD
added 2022/12/16 4:15 p.m.11 views

CVE-2022-42520

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS0.00019EPSS
Exploits0References1
Prion
Prion
added 2022/12/16 4:15 p.m.12 views

Design/Logic Flaw

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4CVSS6.6AI score0.00019EPSS
Exploits0References1
CVE
CVE
added 2022/12/16 12:0 a.m.82 views

CVE-2022-42520

CVE-2022-42520: Use-after-free in Android’s ServiceInterface::HandleRequest (serviceinterface.cpp) can lead to local escalation of privilege to system level. Affected component: Android kernel/service interface; exploitation described as LOCAL with HIGH privileges required and no user interaction...

6.7CVSS6.6AI score0.00019EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/16 12:0 a.m.15 views

CVE-2022-42520

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.9AI score0.00019EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/12/29 3:15 p.m.19 views

CVE-2020-5801

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

7.5AI score0.01305EPSS
Exploits0References1
Rows per page
Query Builder