Lucene search
+L

110278 matches found

OSV
OSV
added 2026/08/14 3:17 p.m.10 views

DEBIAN-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.6AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/14 3:17 p.m.11 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS0.00235EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/14 3:17 p.m.11 views

UBUNTU-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.6AI score0.00235EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/14 3:09 p.m.11 views

CVE-2026-56853

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.5AI score0.00568EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/08/14 2:51 p.m.11 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.6AI score0.00235EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/14 2:51 p.m.9 views

EUVD-2026-58670

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.6AI score0.00235EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/14 2:51 p.m.67 views

CVE-2026-19879

Undertow contains a vulnerability in the HTTP response header writing path: the writeString() method narrows 16‑bit Unicode to 8‑bit bytes when writing header values, which can truncate characters to ASCII control/symbols and cause limited integrity impact or information disclosure if input isn’t...

5.3CVSS5.6AI score0.00235EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/14 2:51 p.m.14 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.5AI score0.00235EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/14 12:22 p.m.22 views

ROOT-APP-MAVEN-CVE-2025-11143 CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root

Root has patched CVE-2025-11143 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...

3.7CVSS6.4AI score0.00159EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 12:22 p.m.19 views

ROOT-APP-MAVEN-CVE-2024-6763 CVE-2024-6763 in org.eclipse.jetty:jetty-http - Patched by Root

Root has patched CVE-2024-6763 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...

3.7CVSS6.5AI score0.00965EPSS
SaveExploits1
NVD
NVD
added 2026/08/14 12:16 p.m.20 views

CVE-2026-72836

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

9.2CVSS0.00412EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/14 12:16 p.m.10 views

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS0.00335EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/14 12:16 p.m.13 views

UBUNTU-CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.6AI score0.00335EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/14 12:06 p.m.8 views

RLSA-2026:54650 Moderate: nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...

5.4CVSS5.7AI score0.00253EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/08/14 12:06 p.m.16 views

nghttp2 security update

An update is available for nghttp2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libnghttp2 is a library implementing the Hypertext Transfer Protocol version...

6.3CVSS5.7AI score0.00253EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/08/14 12:04 p.m.12 views

nghttp2 security update

An update is available for nghttp2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libnghttp2 is a library implementing the Hypertext Transfer Protocol version ...

6.3CVSS5.7AI score0.00253EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 12:04 p.m.40 views

RLSA-2026:54662 Moderate: nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...

5.4CVSS5.7AI score0.00253EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/08/14 12:03 p.m.12 views

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

9.8CVSS8.3AI score0.00397EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/14 11:35 a.m.12 views

EUVD-2026-58619

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.6AI score0.00335EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/14 11:35 a.m.12 views

CVE-2026-73051 actix-http before 3.12.1 HTTP Request Smuggling via CL.TE

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.5AI score0.00335EPSS
SaveExploits0References2
Rows per page
Query Builder