2014 matches found
CVE-2026-76458 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-76458
The Cisco NX-OS Software is affected by vulnerabilities involving the improper handling of exceptional conditions (CWE-703), as identified during a proactive internal security review. The high-severity issue (CVSS 3.1: 8.6) primarily impacts availability and can be triggered over a network with l...
CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspne...
DEBIAN-CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242
The Apache log4net logging framework (versions 1.2.11 through 3.5.0 ) is vulnerable to an Improper Handling of Exceptional Conditions (CWE-755) in the aspnet-request pattern converter. When reading request parameters, certain content—such as markup—triggers ASP.NET request validation , causing th...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
EUVD-2026-93867
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
EUVD-2026-93866
Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...
CVE-2026-82162
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-82162
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...
EUVD-2026-93659
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-82162
Versions prior to 5.2.3.35 of Dell Command | Configure (DCC) are vulnerable to an Improper Handling of Mixed Encoding vulnerability (CWE-175). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Elevation of Privileges . Remediation information can be fou...
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers...
PT-2026-107234
Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.11 through 3.4.x Description Improper handling of exceptional conditions in the aspnet-request pattern converter allows a sender to suppress the log record of their own request. When reading request parameters,...
CVE-2025-8110
CVE-2025-8110 Gogs 的 PutContents API 对符号链接的处理不当,可导致本地代码执行。 此检测方法如何工作? 通过正则表达式(Gogs Version: X.X.X)从 /user/login 的页脚中提取 Gogs 版本,并将运行 0.13.3 或更早版本的实例标记为易受 CVE-2025-8110 影响。 如何运行此脚本? 1. 下载并安装 Nuclei。 2. 将此仓库克隆到本地系统。 3. 运行以下命令: nuclei -u -t template.yaml 或者,如果你想扫描主机列表,请执行: nuclei -l -t template.yaml...
CVE-2026-43499
CVE-2026-43499 利用说明 严重性: 高 CVSS: 7.8 影响: 机密性、完整性、可用性 发布时间: 2026-05-21 技术摘要 CVE-2026-43499 是 Linux 内核中的一个漏洞,具体影响负责管理实时互斥锁的 rtmutex 组件。该漏洞源于实时锁队列操作期间对等待任务的不当处理,其中 removewaiter 函数使用了当前任务而非预期的等待任务。CVE-2026-43499 是 Linux 内核中的一个漏洞,具体影响负责管理实时互斥锁的 rtmutex 组件。该漏洞源于实时锁队列操作期间对等待任务的不当处理,其中 removewaiter...
CVE-2023-4696
CVE-2023-4696 由于对 JWT 令牌处理不当导致的账户接管漏洞(memos v0.13.2) 描述 我想揭示一个我在 usememos/memos 系统中最近发现的重要安全漏洞。该漏洞可能允许任何用户以相对简单的方式修改其他用户的数据,包括其密码。通过利用这一缺陷,攻击者可能获得对敏感信息的未授权访问,从而导致一系列安全和隐私问题。让我们深入了解这一发现的细节。 该漏洞的核心在于 JSON Web 令牌(JWT)的处理方式,这是一种常用于安全数据交换的机制。在 usememos/memos 系统中,服务器未能充分验证 JWT 令牌是否合法签发。这一疏忽意味着,即使是使用...
CVE-2026-90440
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...