Lucene search
+L

4655 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/10 12:00 a.m.•8 views

Array Networks ArrayOS <= 9.4.0.481 RCE (CVE-2023-28461)

The version of Array Networks ArrayOS running on the remote device is 9.4.0.481 or prior. It is, therefore, affected by a remote code execution vulnerability. Unauthenticated attackers could execute remote code by exploiting a specific attribute in an HTTP header, enabling them to browse the...

9.8CVSS8.7AI score0.68079EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/09 7:09 a.m.•25 views

CVE-2025-11441

A vulnerability was identified in JhumanJ OpnForm up to 1.9.3. The affected element is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of excessive authentication attempts. The attack is possible to be carrie...

6.3CVSS7AI score0.00604EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2025/10/08 11:22 p.m.•16 views

SUSE CVE-2025-58186

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption...

5.3CVSS7AI score0.00565EPSS
SaveExploits0References13
OSV
OSV
•added 2025/10/08 7:02 a.m.•13 views

CVE-2025-11441 JhumanJ OpnForm HTTP Header excessive authentication

A vulnerability was identified in JhumanJ OpnForm up to 1.9.3. The affected element is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of excessive authentication attempts. The attack is possible to be carrie...

6.3CVSS5.2AI score
SaveExploits0References7
CVE
CVE
•added 2025/10/08 7:02 a.m.•43 views

CVE-2025-11441

The CVE-2025-11441 entry affects JhumanJ OpnForm (up to v1.9.3). The vulnerability lies in the HTTP Header Handler component, where manipulating the X-Forwarded-For parameter can lead to improper restriction of excessive authentication attempts. Impact is remote, with network attack vector, high ...

6.3CVSS4.4AI score0.00604EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/08 7:02 a.m.•37 views

CVE-2025-11441 JhumanJ OpnForm HTTP Header excessive authentication

A vulnerability was identified in JhumanJ OpnForm up to 1.9.3. The affected element is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of excessive authentication attempts. The attack is possible to be carrie...

6.3CVSS0.00604EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•16 views

OpnForm 安全漏洞

OpnForm is a form builder by Julien Nahum Personal Developer. A security vulnerability exists in OpnForm 1.9.3 and earlier versions, which stems from improper manipulation of the parameter X-Forwarded-For in the HTTP Header Handler component, which may result in improperly limiting excessive...

6.3CVSS4.8AI score0.00604EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•32 views

PT-2025-41236

Name of the Vulnerable Software and Affected Versions JhumanJ OpnForm versions up to 1.9.3 Description A security issue exists in JhumanJ OpnForm related to improper restriction of excessive authentication attempts. The issue is located within the HTTP Header Handler component and involves...

6.3CVSS4.3AI score0.00604EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•2 views

CVE-2025-11441: Improper Restriction of Excessive Authentication Attempts

A vulnerability was identified in JhumanJ OpnForm up to 1.9.3. The affected element is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of excessive authentication attempts. The attack is possible to be carrie...

6.3CVSS4.7AI score0.00604EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/07 6:09 a.m.•37 views

CVE-2025-11284

A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...

7.5CVSS6.6AI score0.0043EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2011-3304

Malware in sbrugna...

7.5CVSS6.4AI score0.01994EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-10525

Malware in sbrugna...

7.5CVSS5.7AI score0.01768EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-24441

Malware in sbrugna...

5.3CVSS5.4AI score0.01744EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-13360

Malware in sbrugna...

9CVSS8.3AI score0.01898EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2012-3776

Malware in sbrugna...

5CVSS6.4AI score0.01289EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2017-5704

Malware in sbrugna...

6.1CVSS6.3AI score0.00635EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-25465

Malware in sbrugna...

5.4CVSS5.5AI score0.00495EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2017-5551

Malware in sbrugna...

6.1CVSS6.3AI score0.00708EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-10779

Malware in sbrugna...

9.8CVSS9.4AI score0.00863EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-8765

Malware in sbrugna...

6.1CVSS6.6AI score0.0302EPSS
SaveExploits1References2
Rows per page
Query Builder