Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/03/23 7:3 a.m.2 views

CVE-2026-4437

A flaw was found in glibc the GNU C Library. When an application uses the gethostbyaddr or gethostbyaddrr functions with a nsswitch.conf configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS Domain Name System response. This crafted response can caus...

7.5CVSS5.6AI score0.00089EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2004-0063

Malware in sbrugna...

7.5CVSS6.4AI score0.00602EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-20841

Malicious code in bioql PyPI...

8.2CVSS6.3AI score0.00082EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2016-1200

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.14676EPSS
Exploits0References14
Redos
Redos
added 2025/08/13 12:0 a.m.3 views

ROS-20250813-08

A vulnerability in the Java dnsjava DNS implementation is related to incorrect response checking during processing of DNS queries. Exploitation of the vulnerability could allow a remote attacker to bypass the implemented security restrictions. enforced security restrictions...

8.9CVSS7.4AI score0.00194EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 7:35 a.m.5 views

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

5.3CVSS5.2AI score0.00288EPSS
Exploits1References1
Veracode
Veracode
added 2024/06/21 5:36 a.m.9 views

Improper Preservation Of Permissions

github.com/authzed/spicedb is vulnerable to Improper Preservation Of Permissions. The vulnerability is due to a failure in the exclusion dispatcher to request all the folders in which the user is a member, leading to an incorrect NOPERMISSION response when the user should have permission...

3.7CVSS7AI score0.0019EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/03/11 5:15 p.m.12 views

CVE-2024-0048

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

8.4CVSS6.7AI score0.00021EPSS
Exploits0References2
CNVD
CNVD
added 2021/01/18 12:0 a.m.25 views

GitLab Authorization Issues Vulnerability (CNVD-2021-26107)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...

7.5CVSS6.1AI score0.00248EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/15 12:0 a.m.1 views

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...

7.5CVSS7.1AI score0.00248EPSS
Exploits0References4
OSV
OSV
added 2020/01/22 2:15 a.m.13 views

CVE-2019-16791

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...

5.9CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2020/01/22 2:15 a.m.5 views

CVE-2019-16791

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...

6.9CVSS6.7AI score0.003EPSS
Exploits0References2
Prion
Prion
added 2020/01/22 2:15 a.m.11 views

Design/Logic Flaw

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...

4.3CVSS5.7AI score0.003EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2015/02/10 7:59 p.m.11 views

Out-of-bounds

minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read...

5CVSS6.7AI score0.00318EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2015/02/10 7:0 p.m.15 views

CVE-2015-1548

minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read...

6.1AI score0.00318EPSS
Exploits1References2
FreeBSD
FreeBSD
added 2015/02/10 12:0 a.m.33 views

mini_httpd -- buffer overflow via snprintf

ACME Updates reports: minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read. rene ACME, the author, claims that the...

5CVSS6.2AI score0.00318EPSS
Exploits1References2
Rows per page
Query Builder