Lucene search
K

66 matches found

NVD
NVD
added 2026/05/08 4:16 p.m.5 views

CVE-2026-41683

i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware wrote user-controlled language values into the Content-Language response header after passing them through utils.escape, which ...

8.6CVSS0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/04/22 8:25 p.m.6 views

GHSA-C3H8-G69V-PJRG i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header

Summary Versions of i18next-http-middleware prior to 3.9.3 wrote user-controlled language values into the Content-Language response header after passing them through utils.escape, which is an HTML-entity encoder that does not strip carriage return, line feed, or other control characters. When the...

8.6CVSS5.9AI score0.00018EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-4626

Malware in sbrugna...

5.3CVSS5.3AI score0.00146EPSS
Exploits1References3
vulnersOsv
vulnersOsv
added 2025/07/15 3:31 p.m.7 views

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.stainless:grails-tika (=0.1.0) +2893 more potentially affected by CVE-2025-48795 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.5.10)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.1.0.RELEASE - cloud.testload:jmeter-clickhouse-listener =2.00 and more Source cves: CVE-2025-48795 Source...

5.6CVSS6.7AI score0.0031EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2022/11/08 8:0 a.m.98 views

Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)

Description of the security update for SharePoint Server 2019: September 13, 2022 KB5002258 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the vulnerabilities...

8.8CVSS8.1AI score0.38418EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2022/05/20 11:18 p.m.16 views

CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...

5.3CVSS5.2AI score0.00146EPSS
Exploits1References1
OSV
OSV
added 2019/06/30 2:15 p.m.3 views

CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...

5.3CVSS6.4AI score
Exploits0References2
NVD
NVD
added 2019/06/30 2:15 p.m.17 views

CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...

5.3CVSS5AI score0.00146EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2019/06/30 2:15 p.m.15 views

CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...

5.3CVSS6.1AI score0.00146EPSS
Exploits1References2
Hacker One
Hacker One
added 2019/05/23 1:21 a.m.70 views

Tor: Detect Tor Browser's language

Summary Some error pages uses Tor Browser's language based text, and iframe can steal it. Details Since the language of Tor Browser is used for the title of the link tag on 404 error page, an attacker can obtain the language of Tor Browser even if the user has set privacy.spoofenglish to 2. I...

5CVSS0.00146EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2018/10/19 4:40 p.m.1 views

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.platon.pulsar:pulsar-persist (>=1.9.0 <=1.10.23) +2069 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (>=2.0.10 <=3.1.15)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.0.10, =1.0.0, =1.9.0, =1.1.7, =1.1.9, =1.2.5, =3.6.1, =3.11.0, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.1.0.RELEASE and more Source cves: CVE-2018-8039 Source advisory: OSV:GHSA-JC7R-V6FG-2GPF...

8.1CVSS7AI score0.02899EPSS
Exploits0
hackapp
hackapp
added 2016/04/01 9:5 a.m.9 views

SMS+Car Language Detection - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS+Car Language Detection published at the 'play' market has multiple vulnerabilities...

1.1AI score
Exploits0References1Affected Software1
n0where
n0where
added 2015/05/08 2:41 p.m.20 views

focused Web Crawler: ACHE

ACHE is a focused Web crawler that can be customized to search for pages the belong to a given topic or have a given property. To configure ACHE, you need to: define a topic of interest e.g., Ebola, terrorism, cooking recipes; create a model to detect Web pages that belong to this topic; and...

0.8AI score
Exploits0References2
0day.today
0day.today
added 2007/03/22 12:0 a.m.12 views

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== PortailPhp 2.0 idnews Remote SQL Injection Exploit ==================================================== use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote...

7.1AI score
Exploits0
0day.today
0day.today
added 2006/04/29 12:0 a.m.55 views

Invision Power Board <= 2.1.5 search.php Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Invision Power Board pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is i...

7.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.11 views

Windows Upgrade Language detectoid (zh-tw)

This is the detectoid to be used for detecting Windows language locale for OS Upgrade updates...

2.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.12 views

Windows Upgrade Language detectoid (lv-lv)

This is the detectoid to be used for detecting Windows language locale for OS Upgrade updates...

2.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Windows Upgrade Language detectoid (nl-nl)

This is the detectoid to be used for detecting Windows language locale for OS Upgrade updates...

2.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.7 views

D_Server_Local_DEU

Detects server language - DEU...

1.7AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.9 views

D_Server_Local_CHT

Detects Server language - CHT...

1.2AI score
Exploits0
Rows per page
Query Builder