Lucene search
+L

1124 matches found

OSV
OSV
added 2025/10/10 7:28 p.m.9 views

CVE-2025-61921 Sinatra has ReDoS vulnerability in ETag header value generation

Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response. Carefully crafted...

6.9CVSS6.8AI score0.00458EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/10 7:28 p.m.44 views

CVE-2025-61921

CVE-2025-61921 affects Sinatra up to version 4.1.x (pre-4.2.0), where parsing of If-Match and If-None-Match headers during response construction with etag can consume excessive time, enabling a possible DoS. The issue is tied to the header parsing component and impacts applications using the etag...

7.5CVSS6.3AI score0.00458EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.7 views

Sinatra 安全漏洞

Sinatra is a Sinatra open source DSL for quickly creating web applications in Ruby with minimal effort A security vulnerability exists in Sinatra versions prior to 4.2.0 that stems from a flaw in the If-Match and If-None-Match header parsing components that could lead to a denial of service attac...

7.5CVSS6.1AI score0.00458EPSS
SaveExploits1References5
RubySec
RubySec
added 2025/10/10 12:0 a.m.11 views

Sinatra is vulnerable to ReDoS through ETag header value generation

Summary There is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response and you are using Ruby = 3.2...

7.5CVSS6.5AI score0.00458EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.7 views

PT-2025-41597

Name of the Vulnerable Software and Affected Versions Sinatra versions prior to 4.2.0 Description Sinatra, a domain-specific language for creating web applications in Ruby, contains an issue where carefully crafted input can cause excessive processing time during the parsing of If-Match and...

6.9CVSS6.6AI score0.00458EPSS
SaveExploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2009-3341

Malware in sbrugna...

4.3CVSS6.4AI score0.01573EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-6090

Malware in sbrugna...

1.7CVSS6.7AI score0.00376EPSS
SaveExploits0References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-6144

Malware in sbrugna...

5CVSS6.4AI score0.01461EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-6243

Malware in sbrugna...

5.3CVSS5.5AI score0.01073EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-21450

Malware in sbrugna...

6.1CVSS6.2AI score0.02273EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2010-4218

Malware in sbrugna...

6.1CVSS6.3AI score0.01029EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2013-6229

Malware in sbrugna...

7.5CVSS6AI score0.02542EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987112 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fibinfo contains an nh reference Gwangun Jung...

7.1CVSS5.9AI score0.00255EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.7 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986665 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ACPI: utils: Fix reference counting in...

5.5CVSS6.2AI score0.00235EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/04 12:0 a.m.7 views

PT-2025-40756

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a folio lock is leaked when fscache is in use and a cache hit occurs during a read operation. This occurs because the cifs readpage worker functi...

6.5AI score0.00135EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-19255

Malicious code in bioql PyPI...

5.3CVSS5.5AI score0.0031EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-12935

Malicious code in bioql PyPI...

5.6AI score0.00177EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-55476

Malicious code in bioql PyPI...

8.6AI score0.00193EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2024-2632

Malicious code in bioql PyPI...

4.3CVSS6.3AI score0.00535EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-25554

Malicious code in bioql PyPI...

6.3AI score0.00155EPSS
SaveExploits0References5
Rows per page
Query Builder