Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2025/10/23 12:31 p.m.6 views

Moodle's error handling leads to sensitive information disclosure

An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...

5.3CVSS6.9AI score0.00043EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2025/10/23 12:31 p.m.1 views

GHSA-C5CJ-XP43-QCC3 Moodle's error handling leads to sensitive information disclosure

An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...

5.3CVSS6.9AI score0.00043EPSS
Exploits0References7
NVD
NVD
added 2025/10/23 12:15 p.m.1 views

CVE-2025-62396

An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...

5.3CVSS0.00043EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/12 8:18 a.m.4 views

CVE-2025-52615 HCL Unica Platform is impacted by misconfigured security related HTTP headers

HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser default treatment for the policies controlled by these headers...

3.5CVSS0.00029EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2025/08/08 5:9 p.m.6 views

K000152924: Apache HTTP Server vulnerability CVE-2024-43204

Security Advisory Description SSRF in Apache HTTP Server with modproxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where modheaders is configured to modify the Content-Type request or response header with a valu...

7.5CVSS6.8AI score0.00684EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.6 views

F5 Networks BIG-IP : Apache HTTP Server vulnerability (K000152924) (deprecated)

The vendor no longer states that their product is vulnerable. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution K000152924. Disabled on 2026/01/29. Advisory states BIG-IP no longer vulnerable...

7.5CVSS6.8AI score0.00684EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/09 12:0 a.m.2 views

Shopware 授权问题漏洞

Shopware is a suite of open source e-commerce software from the German company Shopware. Shopware is vulnerable to an access control error that stems from not properly setting sensitive HTTP headers to non-cacheable, which could be exploited by an attacker to enable HTTP caching and then have...

6.5CVSS5.7AI score0.00186EPSS
Exploits0References2
Rows per page
Query Builder