Lucene search
+L

734 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 6:07 p.m.18 views

CVE-1999-0299

Buffer overflow in FreeBSD lpd through long DNS hostnames...

9.3CVSS7.3AI score0.013EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/17 12:00 a.m.8 views

EulerOS Virtualization 2.12.0 : pam (EulerOS-SA-2025-1571)

According to the versions of the pam package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability...

7.4CVSS6.7AI score0.00781EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/12 10:15 p.m.9 views

CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

6.2CVSS5.8AI score0.00212EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/12 10:15 p.m.12 views

CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

6.2CVSS0.00212EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/27 12:18 a.m.18 views

CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

5.4CVSS7.4AI score0.00194EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/03/26 3:29 a.m.6 views

SUSE CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

5.4CVSS7.1AI score0.00194EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/25 6:15 a.m.6 views

DEBIAN-CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

5.4CVSS5.9AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/25 6:15 a.m.10 views

UBUNTU-CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

5.4CVSS5.9AI score0.00194EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/25 12:00 a.m.10 views

Mbed TLS 安全漏洞

Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library from Mbed TLS Open Source. A security vulnerability exists in Mbed TLS versions prior to 2.28.10 and 3.x versions prior to 3.6.3, which stems from a client accepting trusted certificates for arbitrary hostnames...

5.4CVSS6.5AI score0.00194EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/03/25 12:00 a.m.57 views

CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

5.4CVSS5.9AI score0.00194EPSS
SaveExploits0
CVE
CVE
added 2025/03/25 12:00 a.m.123 views

CVE-2025-27809

MBed TLS vulnerability CVE-2025-27809 affects client-side TLS: versions before 2.28.10 and 3.x before 3.6.3 accept servers with trusted certificates for arbitrary hostnames unless the TLS client calls mbedtls_ssl_set_hostname. This can enable hostname validation bypass on affected clients. Connec...

5.4CVSS7.4AI score0.00194EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2025/03/12 7:15 p.m.12 views

AZL-58422 CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

4.4CVSS6.6AI score0.00401EPSS
SaveExploits2References1
OSV
OSV
added 2025/02/21 11:08 a.m.9 views

OESA-2025-1151 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

6.8CVSS6.8AI score0.01556EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2025/02/03 8:57 a.m.4 views

Security update for rust-keylime

This update for rust-keylime fixes the following issues: Update vendored crates CVE-2024-43806, bsc1229952, bsc1230029 rustix 0.37.25 rustix 0.38.34 shlex 1.3.0 Update to version 0.2.6+13: Enable test functional/iak-idevid-persisted-and-protected builddeps: bump uuid from 1.7.0 to 1.10.0 builddep...

7.5CVSS7.7AI score0.00949EPSS
SaveExploits0References10
OSV
OSV
added 2025/01/13 12:00 a.m.30 views

UBUNTU-CVE-2025-23109

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS 134...

6.5CVSS5.8AI score0.00181EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/11 4:15 a.m.20 views

CVE-2025-23109

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS 134...

6.5CVSS5.8AI score
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/01/11 4:15 a.m.15 views

CVE-2025-23109

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS 134...

6.5CVSS6.6AI score0.00181EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/11 4:15 a.m.57 views

CVE-2025-23109

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134...

6.5CVSS0.00181EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/11 3:36 a.m.10 views

CVE-2025-23109 Address bar spoofing on iOS using long hostnames

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134...

5.8AI score0.00181EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/11 3:36 a.m.55 views

CVE-2025-23109 Address bar spoofing on iOS using long hostnames

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134...

0.00181EPSS
SaveExploits0References2
Rows per page
Query Builder