Lucene search
+L

1276 matches found

OpenVAS
OpenVAS
added 2021/02/15 12:00 a.m.20 views

Mongoose Web Server < 7.1 Multiple Vulnerabilities

Mongoose Web Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

9.1CVSS9.4AI score0.01462EPSS
SaveExploits3References3
CNVD
CNVD
added 2021/02/09 12:00 a.m.20 views

Cesanta Mongoose out-of-bounds write vulnerability (CNVD-2021-12086)

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0, 6.7-6.18. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...

9.1CVSS6.8AI score0.01462EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/09 12:00 a.m.32 views

Cesanta Mongoose Out-of-Bounds Write Vulnerability

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...

9.1CVSS6.8AI score0.01462EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/09 12:00 a.m.17 views

Cesanta Mongoose out-of-bounds write vulnerability (CNVD-2021-12087)

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mghttpservefile function in Cesanta Mongoose 7.0. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...

9.1CVSS6.8AI score0.01462EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/08 9:15 p.m.8 views

DEBIAN-CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS5.8AI score0.01462EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/08 9:15 p.m.7 views

DEBIAN-CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS7.3AI score0.01462EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/08 9:15 p.m.27 views

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS0.01462EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/08 9:15 p.m.19 views

CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS6.9AI score
SaveExploits0References1
NVD
NVD
added 2021/02/08 9:15 p.m.21 views

CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS0.01462EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/08 9:15 p.m.7 views

DEBIAN-CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS7.3AI score0.01462EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/08 9:15 p.m.21 views

Design/Logic Flaw

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

6.4CVSS9.1AI score0.01462EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/02/08 9:15 p.m.21 views

Design/Logic Flaw

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

6.4CVSS9.1AI score0.01462EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/02/08 9:15 p.m.17 views

Design/Logic Flaw

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

6.4CVSS9.1AI score0.01462EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/08 9:15 p.m.7 views

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS8.4AI score0.01462EPSS
SaveExploits1References2
CVE
CVE
added 2021/02/08 8:13 p.m.83 views

CVE-2021-26530

CVE-2021-26530 describes a vulnerability in Cesanta Mongoose HTTPS server 7.0 when compiled with OpenSSL. The vulnerable component is the mg_tls_init function, which allows a remote out-of-bounds write via a connection request after the memory pool is exhausted. The Connected documents confirm th...

9.1CVSS9.1AI score0.01462EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/02/08 8:13 p.m.17 views

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS8.5AI score0.01462EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/02/08 8:13 p.m.15 views

CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS8.5AI score0.01462EPSS
SaveExploits1
CVE
CVE
added 2021/02/08 8:13 p.m.89 views

CVE-2021-26528

The CVE-2021-26528 issue affects Cesanta Mongoose HTTP server (7.0) where the function mg_http_serve_file is vulnerable to a remote OOB write after the memory pool is exhausted. This is documented as a high-severity (CVSS v3.1: 9.1, CRITICAL) network-facing vulnerability with potential impact to ...

9.1CVSS9.2AI score0.01462EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/08 8:13 p.m.24 views

CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.4AI score0.01462EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/02/08 8:13 p.m.15 views

CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

9.1CVSS8.5AI score0.01462EPSS
SaveExploits1
Rows per page
Query Builder