Lucene search
+L

26 matches found

Cvelist
Cvelist
added 2025/04/14 2:0 p.m.44 views

CVE-2025-32908 Libsoup: denial of service on libsoup through http/2 server

A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service DoS...

7.5CVSS0.00572EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/29 12:15 p.m.26 views

Design/Logic Flaw

The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...

5.4CVSS8.2AI score0.0063EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.5 views

The vulnerability of the Node.js software platform, related to insufficient validation of input data during the processing of HTTP headers, allows a hacker to gain full control over the application.

The vulnerability of the Node.js software platform is related to insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to gain full control over an application through various network protocols...

10CVSS7.2AI score0.20041EPSS
SaveExploits1References17Affected Software5
Positive Technologies
Positive Technologies
added 2017/10/04 12:0 a.m.8 views

PT-2017-3122 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue is related to insufficient validation of HTTP request headers in the direct authentication feature of Cisco Adaptive Security Appliance ASA...

8.6CVSS8.3AI score0.06541EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2010/11/10 7:0 p.m.5 views

OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...

5.1CVSS5.8AI score0.10557EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2006/11/22 12:0 a.m.30 views

Debian DSA-1215-1 : xine-lib - several vulnerabilities

Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4799 The XFocus Security Team discovered that insufficient...

7.5CVSS6.1AI score0.04901EPSS
SaveExploits0References6
Rows per page
Query Builder