Lucene search
K

10 matches found

EUVD
EUVD
added 2026/01/24 1:50 a.m.4 views

EUVD-2026-4601

C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's...

7.5CVSS5.8AI score0.00589EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/24 1:50 a.m.3 views

CVE-2026-24469 C++ HTTP Server has Critical Path Traversal Vulnerability in RequestHandler Allowing Arbitrary File Read

C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's...

7.5CVSS6AI score0.00589EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 11:31 p.m.13 views

CVE-2025-1890 shishuocms ManageUpLoadAction.java handleRequest unrestricted upload

A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be...

6.5CVSS0.00452EPSS
Exploits1References4
OSV
OSV
added 2024/07/19 11:15 a.m.4 views

CVE-2024-5977

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.13.0 via the 'handleRequest' function due to missing validation on a user controlled key. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00428EPSS
Exploits0References3
NVD
NVD
added 2022/12/16 4:15 p.m.13 views

CVE-2022-42520

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS0.00124EPSS
Exploits0References1
Prion
Prion
added 2022/12/16 4:15 p.m.17 views

Design/Logic Flaw

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4CVSS6.6AI score0.00124EPSS
Exploits0References1
CVE
CVE
added 2022/12/16 12:0 a.m.91 views

CVE-2022-42520

CVE-2022-42520: Use-after-free in Android’s ServiceInterface::HandleRequest (serviceinterface.cpp) can lead to local escalation of privilege to system level. Affected component: Android kernel/service interface; exploitation described as LOCAL with HIGH privileges required and no user interaction...

6.7CVSS6.6AI score0.00124EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/16 12:0 a.m.18 views

CVE-2022-42520

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.9AI score0.00124EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.1 views

The vulnerability of the CFTLDManager::HandleRequest function in the RnaDaSvr.dll software of the FactoryTalk Linx automation system allows a intruder to trigger a service failure.

The vulnerability of the CFTLDManager::HandleRequest function in the FactoryTalk Linx automation system software is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.8CVSS7.2AI score0.25219EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2020/12/29 3:15 p.m.26 views

CVE-2020-5801

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

7.5AI score0.25219EPSS
Exploits0References1
Rows per page
Query Builder