109962 matches found
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2026-42530 vulnerabilities
Vulnerabilities for packages: nginx-mainline...
GHSA-VXCV-H5WJ-JXR5 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-X88Q-X2R7-VG3G vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2026-60005 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-V43F-895R-CHHH vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2026-32647 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2026-40701 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-M73P-XG7Q-M8F2 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
DEBIAN-CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-17639
Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...
nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests
A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections...
Moderate: Red Hat Security Advisory: nghttp2 security update
An update for nghttp2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2026-17639 Certain HP Smart Tank All in One – Potential Denial of Service
Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...
EUVD-2026-60359
Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...
CVE-2026-17639
HP Smart Tank All-in-One printers are vulnerable to denial of service via concurrent HTTP requests; no specific models or patch versions are provided. CVSS 4.0 scores MEDIUM (6.9). Exploitation status is not reported. See HP advisory HPSBPI04142 for details. Monitor for vendor updates. No exploit...
CVE-2026-17639
Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...
Use of Cache Containing Sensitive Information
Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to the setVaryHeader method in...
GHSA-8C42-7QJ2-3J46 Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
Summary Netty's CorsHandler silently overwrites existing Vary headers, enabling cache poisoning and sensitive information disclosure. Details io.netty.handler.codec.http.cors.CorsHandlersetVaryHeader overwrites any existing Vary headers set by backend applications. java private static void...