Lucene search
K

55 matches found

SUSE CVE
SUSE CVE
added 2026/03/25 12:25 a.m.3 views

SUSE CVE-2026-29194

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. When a route permits host authentication hostAllowed=true, a valid host token bypasses all subsequent authorization checks without verifying that the host is...

8.6CVSS5.8AI score0.00036EPSS
Exploits0References3
NVD
NVD
added 2026/03/07 4:15 p.m.3 views

CVE-2026-29194

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. When a route permits host authentication hostAllowed=true, a valid host token bypasses all subsequent authorization checks without verifying that the host is...

8.6CVSS0.00036EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/07 4:12 p.m.2 views

CVE-2026-29194

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. When a route permits host authentication hostAllowed=true, a valid host token bypasses all subsequent authorization checks without verifying that the host is...

8.6CVSS5.8AI score0.00036EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-0631

Malware in sbrugna...

6.1CVSS5.9AI score0.15453EPSS
Exploits1References18
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/09 7:28 a.m.10 views

Security Bulletin: Vulnerability in sudo library (CVE-2025-32462) affects Power HMC.

Summary The sudo library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-32462 DESCRIPTION: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows liste...

8.8CVSS7AI score0.30014EPSS
Exploits12Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-22942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious...

6.1CVSS6.5AI score0.00533EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-22881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in...

6.1CVSS6.5AI score0.15453EPSS
Exploits1References2
Redos
Redos
added 2024/08/23 12:0 a.m.17 views

ROS-20240823-02

A vulnerability in the Host Authorization Middleware Action Pack component of the Ruby on Rails software platform is related to the creation of "X-Forwarded-Host" headers in combination with certain "authorized host" formats. host." Exploitation of the vulnerability could allow an attacker acting...

6.1CVSS6.7AI score0.28611EPSS
Exploits0
OSV
OSV
added 2024/03/06 11:3 a.m.26 views

BIT-RAILS-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.1AI score0.28611EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.2 views

SUSE CVE-2021-22881

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious...

6.1CVSS6.4AI score0.15453EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.1 views

SUSE CVE-2021-22942

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...

6.1CVSS6.1AI score0.00533EPSS
Exploits0References4
Veracode
Veracode
added 2022/01/11 12:30 p.m.161 views

Open Redirect

rails is vulnerable to open redirect. A remote attacker is able to redirect users to a malicious websites via a crafted X-Forwarded-Host header in combination with a certain "allowed host" format in host authorization middleware...

6.1CVSS5.1AI score0.28611EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2022/01/10 2:10 p.m.22 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS0.28611EPSS
Exploits0References3
OSV
OSV
added 2022/01/10 2:10 p.m.17 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.4AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2022/01/10 2:10 p.m.26 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.6AI score0.28611EPSS
Exploits0References5
OSV
OSV
added 2022/01/10 2:10 p.m.0 views

UBUNTU-CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.5AI score0.28611EPSS
Exploits0References6
Prion
Prion
added 2022/01/10 2:10 p.m.16 views

Open redirect

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

5.8CVSS6.1AI score0.28611EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/01/07 12:0 a.m.30 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.5AI score0.28611EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2022/01/07 12:0 a.m.69 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS5.8AI score0.28611EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/12/20 3:14 p.m.31 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS4.1AI score0.28611EPSS
Exploits0References4
Rows per page
Query Builder