Lucene search
+L

155 matches found

OSV
OSV
added 2025/12/05 7:15 p.m.10 views

UBUNTU-CVE-2025-66570

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS5.7AI score0.00328EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/05 6:18 p.m.10 views

EUVD-2025-201455

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS6.5AI score0.00328EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/05 6:18 p.m.9 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS7AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:00 a.m.6 views

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2025-2380)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init defau...

8.8CVSS5.5AI score0.00219EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2013-2393

Malware in sbrugna...

5CVSS7.4AI score0.04326EPSS
SaveExploits0References46
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-1349

Malware in sbrugna...

7.5CVSS6.1AI score0.0495EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/10/03 8:07 p.m.24 views

EUVD-2025-23168

Malicious code in bioql PyPI...

6.9CVSS6.4AI score0.00274EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-51562

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00546EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2025-18953

Malicious code in bioql PyPI...

10CVSS8.2AI score0.17188EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-47952

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00601EPSS
SaveExploits1References2
OSV
OSV
added 2025/09/17 3:15 p.m.12 views

DEBIAN-CVE-2023-53343

In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6nullentry-rt6iidev in icmp6dev. With some IPv6 Ext Hdr RPL, SRv6, etc., we can send a packet that has the link-local address as src and dst IP and will be forwarded to an external IP in the IPv6 Ex...

5.5CVSS5.5AI score0.00204EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/09/08 12:00 a.m.4 views

The vulnerability of the Cloud-Init initialization tool, related to deficiencies in the authentication process, allows a perpetrator to elevate their privileges to the root level.

The vulnerability of the Cloud-Init initialization tool is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root access for a strictly encrypted URL with a local IP address...

8.8CVSS7.3AI score0.00219EPSS
SaveExploits0References7Affected Software7
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.11 views

PT-2025-34860

Name of the Vulnerable Software and Affected Versions: Linksys E1700 version 1.0.0.4.003 Description: A stack-based buffer overflow exists in the setWan function of the /goform/setWan file. Manipulation of the DeviceName/lanIp argument causes the overflow, allowing for potential remote code...

9CVSS9.3AI score0.01386EPSS
SaveExploits1References14
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-10026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot...

6.3CVSS6.2AI score0.00226EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-21938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcppmnlappendnewlocaladdr If multiple connection...

7.5CVSS5.5AI score0.00379EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/02 8:23 p.m.18 views

CVE-2025-43018

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...

6.9CVSS5.7AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/30 3:15 p.m.55 views

CVE-2025-43018

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...

6.9CVSS0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/30 3:15 p.m.10 views

CVE-2025-43018

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...

5.3CVSS5.7AI score0.00274EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/30 2:31 p.m.37 views

CVE-2025-43018 Certain HP LaserJet Pro Printers – Potential Information Disclosure

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...

6.9CVSS0.00274EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/30 2:31 p.m.5 views

CVE-2025-43018 Certain HP LaserJet Pro Printers – Potential Information Disclosure

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...

6.9CVSS6.5AI score0.00274EPSS
SaveExploits0References1
Rows per page
Query Builder