Lucene search
+L

45008 matches found

CVE
CVE
•added 2026/09/15 4:25 p.m.•31 views

CVE-2026-79699

A flaw in the containers/storage library (used by Podman , buildah , and skopeo ) allows a crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) to replace the extraction destination directory with an arbitrary file when processed by UnpackLayer, ApplyLayer, or ApplyUncomp...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 4:25 p.m.•34 views

CVE-2026-79699 Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS0.00173EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 4:17 p.m.•13 views

CVE-2026-59157

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

6.5CVSS0.00596EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/15 4:17 p.m.•10 views

DEBIAN-CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 4:17 p.m.•9 views

CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS0.00242EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 4:17 p.m.•6 views

AZL-103104 CVE-2024-58384 affecting package python-tornado 6.3.3-11

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/15 4:10 p.m.•11 views

CVE-2024-58384

A flaw was found in Tornado's CurlAsyncHTTPClient component. This vulnerability, known as CRLF Carriage Return Line Feed injection, occurs because the client fails to properly reject carriage return and line feed characters in HTTP request headers. A remote attacker can exploit this by injecting...

6.3CVSS6AI score0.00242EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/15 3:46 p.m.•36 views

CVE-2026-59157 webhookd: Unrestricted HTTP Header to Shell Variable Injection

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

6.5CVSS0.00596EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/15 3:46 p.m.•7 views

CVE-2026-59157 webhookd: Unrestricted HTTP Header to Shell Variable Injection

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

6.5CVSS5.8AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/15 3:46 p.m.•30 views

CVE-2026-59157

webhookd is a minimalist webhook server that triggers shell scripts via HTTP requests. Prior to 1.22.0 , deployments without htpasswd authentication forwarded all incoming HTTP headers into the hook script environment via HTTPParamsToShellVars in pkg/api/index.go without an allowlist. If an upstr...

6.5CVSS5.8AI score0.00596EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/15 3:46 p.m.•13 views

CVE-2026-59157 webhookd: Unrestricted HTTP Header to Shell Variable Injection

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

6.5CVSS5.9AI score0.00596EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/15 3:46 p.m.•16 views

EUVD-2026-78685

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

6.5CVSS5.8AI score0.00596EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/15 3:43 p.m.•8 views

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/15 3:28 p.m.•9 views

CVE-2026-55211 surfio IRAP header size fields cause out-of-bounds reads

Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a we...

9.8CVSS6AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/15 3:28 p.m.•34 views

CVE-2026-55211 surfio IRAP header size fields cause out-of-bounds reads

Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a we...

9.8CVSS0.00744EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/15 3:18 p.m.•8 views

CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

6.9CVSS6AI score0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 3:18 p.m.•32 views

CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

6.9CVSS0.004EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 3:18 p.m.•16 views

CVE-2026-91966

AVideo through 29.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the check_site_availability function. The function accepts attacker-controlled HTTP Host headers , allowing an unauthenticated attacker to send crafted requests to submitIndex.php or ajax.php with ...

6.9CVSS5.9AI score0.004EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/15 3:18 p.m.•10 views

EUVD-2026-78642

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

6.9CVSS5.9AI score0.004EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 3:18 p.m.•7 views

CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

6.9CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder