Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2026/05/07 12:7 a.m.7 views

OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths

Description A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed when processing certain malformed HTTP requests. This could permit unauthorized access to restricted API endpoints in environments that rely on REST-layer authorization...

5.8AI score
Exploits0References2Affected Software1
OSV
OSV
added 2026/05/07 12:7 a.m.1 views

GHSA-83X9-VC3C-HGHC OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths

Description A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed when processing certain malformed HTTP requests. This could permit unauthorized access to restricted API endpoints in environments that rely on REST-layer authorization...

3.7CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2026/01/16 12:16 a.m.0 views

CVE-2021-47791

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

4.6CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2026/01/16 12:16 a.m.2 views

CVE-2021-47791

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

7.5CVSS0.00036EPSS
Exploits1References4
CVE
CVE
added 2026/01/15 11:25 p.m.7 views

CVE-2021-47791

Summary: CVE-2021-47791 affects SmartFTP Client 10.0.2909.0. According to connected sources, the product is vulnerable to multiple denial-of-service conditions triggered by specially crafted input, including malformed paths, invalid IP addresses, or clearing the connection history in the client i...

7.5CVSS6.6AI score0.00036EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/15 11:25 p.m.24 views

CVE-2021-47791 SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

7.5CVSS0.00036EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.0 views

CVE-2021-47791

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

7.5CVSS5.5AI score0.00036EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/15 11:25 p.m.1 views

CVE-2021-47791 SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

7.5CVSS6.6AI score0.00036EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.1 views

PT-2026-3163

Name of the Vulnerable Software and Affected Versions SmartFTP Client version 10.0.2909.0 Description SmartFTP Client is susceptible to multiple denial of service issues. An attacker can cause the application to crash by providing specially crafted input. This can be achieved by submitting...

7.5CVSS5.4AI score0.00036EPSS
Exploits1References7
Rows per page
Query Builder