Lucene search
+L

28 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-68005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS5.8AI score0.00582EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/17 8:16 p.m.•16 views

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS0.00582EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/17 8:16 p.m.•19 views

DEBIAN-CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS5.4AI score0.00582EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/17 12:00 a.m.•45 views

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

0.00582EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/17 12:00 a.m.•67 views

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS5.4AI score0.00582EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/17 12:00 a.m.•19 views

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

5.4AI score0.00582EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•4 views

CVE-2026-68005: Uncontrolled Resource Consumption

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS5.9AI score0.00582EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/17 12:00 a.m.•29 views

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

5.4AI score0.00582EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/17 12:00 a.m.•24 views

EUVD-2026-60449

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS5.4AI score0.00582EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/17 12:00 a.m.•17 views

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

7.5CVSS5.5AI score0.00582EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•4 views

CVE-2026-66885: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. When Livebook is configured to use Livebook Teams for identity, Livebook.ZTA.LivebookTeams.handlerequest/4 in...

6.8CVSS5.9AI score0.00235EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•1 views

CVE-2025-14364: Missing Authorization

The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handlerequest function in all versions up to, and including, 2.0.8. This makes it possible for authenticated...

8.8CVSS5.6AI score0.00352EPSS
SaveExploits1References1
OSV
OSV
•added 2024/08/20 2:15 a.m.•14 views

CVE-2024-5940

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handlerequest' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to edi...

5.3CVSS5.8AI score0.00466EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•1 views

CVE-2024-5940: Missing Authorization

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handlerequest' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to edi...

6.5CVSS5.7AI score0.00466EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•0 views

CVE-2024-5941: Missing Authorization

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to a missing capability check on the 'handlerequest' function in all versions up to, and including, 3.14.1. This makes it possible for authenticated attackers,...

5.4CVSS5.7AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/05 4:15 a.m.•43 views

CVE-2024-22086

handlerequest in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution...

9.8CVSS9.9AI score0.01098EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/05 12:00 a.m.•0 views

CVE-2024-22086: Out-of-bounds Write

handlerequest in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution...

9.8CVSS8.8AI score0.01098EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/05 12:00 a.m.•70 views

CVE-2024-22086

CVE-2024-22086 affects the Cherry HTTP server. The vulnerability is a stack-based buffer overflow in the handle_request() function in http.c caused by using sscanf with a long URI, enabling remote code execution. Affected versions are Cherry up to 4b877df; explicit fixes are not documented in the...

9.8CVSS9.8AI score0.01098EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/01/05 12:00 a.m.•8 views

cherry Security breach

cherry is an HTTP server for Chee Personal Developers. A security vulnerability exists in cherry, which stems from a stack buffer overflow in the handlerequest function in http.c, leading to remote code execution...

9.8CVSS8.3AI score0.01098EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/14 3:30 a.m.•44 views

GHSA-XVV9-5J67-3RPQ zola Path Traversal vulnerability

An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handlerequest function, used by the server to process HTTP requests, does not account for sequences of special path control...

7.5CVSS7.4AI score0.011EPSS
SaveExploits1References4
Rows per page
Query Builder