Lucene search
+L

190 matches found

Kitploit
Kitploit
•added 2026/11/12 8:29 a.m.•32 views

citrixmash_scanner

CVE-2019-19781 citrixmash scanner A multithreaded scanner for Citrix appliances that are vulnerable to CVE-2019-19781. The scanner does not attempt to compromise/exploit hosts and avoids downloading any sensitive content. A HEAD request is used to determine if a target is vulnerable. False...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits50References2
NVD
NVD
•added 2026/11/06 3:17 p.m.•10 views

CVE-2026-118514

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS0.00613EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/11/06 3:17 p.m.•10 views

DEBIAN-CVE-2026-118514

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS6AI score0.00613EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/11/06 2:09 p.m.•10 views

CVE-2026-118514 Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewalls

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS5.9AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/11/06 2:09 p.m.•2 views

CVE-2026-118514 Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewalls

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS6AI score0.00613EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/11/06 2:09 p.m.•9 views

EUVD-2026-118267

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS6AI score0.00613EPSS
SaveExploits0References3
CVE
CVE
•added 2026/11/06 2:09 p.m.•38 views

CVE-2026-118514

The symfony/http-foundation component (prior to versions 5.4.56 , 6.4.50 , 7.4.23 , and 8.1.11 ) contains a vulnerability where HEAD requests bypass security rules restricted to GET methods. This occurs because RequestMatcher and MethodRequestMatcher perform verbatim method comparisons, while the...

6.3CVSS6AI score0.00613EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/11/06 2:09 p.m.•40 views

CVE-2026-118514 Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewalls

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS0.00613EPSS
SaveExploits0References3
Mend
Mend
•added 2026/11/06 2:09 p.m.•13 views

CVE-2026-118514

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.5CVSS6AI score0.00613EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/06 12:00 a.m.•6 views

CVE-2026-118514: symfony: In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11,…

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS6.1AI score0.00613EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/06 12:00 a.m.•4 views

PT-2026-138037

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, SymfonyComponentHttpFoundationRequestMatcher, and RequestMatcherMethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the list...

6.3CVSS6.1AI score0.00613EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/11/05 10:52 a.m.•12 views

CVE-2026-118514

In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and RequestMatcher\MethodRequestMatcher which replaces it from 6.2.x on, matches a request against a list of HTTP methods. These compared the request method to the lis...

6.3CVSS6AI score0.00613EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/10/31 12:39 a.m.•18 views

CVE-2026-116127

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

9.1CVSS5.8AI score0.00322EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/31 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-116127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The reque...

9.1CVSS5.8AI score0.00322EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/30 1:18 p.m.•30 views

DEBIAN-CVE-2026-116127

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

9.1CVSS5.8AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/30 1:18 p.m.•16 views

CVE-2026-116127

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

9.1CVSS0.00322EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/30 1:18 p.m.•9 views

CVE-2026-116127

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

9.1CVSS5.8AI score0.00322EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/10/30 1:18 p.m.•11 views

UBUNTU-CVE-2026-116127

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

9.1CVSS5.8AI score0.00322EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/30 12:46 p.m.•33 views

CVE-2026-116127 Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

0.00322EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/30 12:46 p.m.•14 views

EUVD-2026-113908

Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The request method is not passed to the response writer, so whatever body the application returns for a HEAD request is sent. With...

5.8AI score0.00322EPSS
SaveExploits0References2
Rows per page
Query Builder