Lucene search
+L

207 matches found

NVD
NVD
added 2025/07/18 5:15 p.m.35 views

CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS0.01735EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/18 5:15 p.m.7 views

DEBIAN-CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.1AI score0.01735EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/18 5:15 p.m.11 views

AZL-65610 CVE-2025-7783 affecting package js-jquery 3.5.0-4

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/18 5:15 p.m.11 views

AZL-65606 CVE-2025-7783 affecting package js-jquery 3.5.0-4

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/18 5:15 p.m.6 views

UBUNTU-CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 -...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1References5
Snyk
Snyk
added 2025/07/18 4:43 p.m.6 views

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...

9.4CVSS7AI score0.01735EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/07/18 4:43 p.m.2 views

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...

9.4CVSS7AI score0.01735EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/07/18 4:34 p.m.89 views

CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS0.01735EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/07/18 4:34 p.m.15 views

CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.2AI score0.01735EPSS
SaveExploits1References2
CVE
CVE
added 2025/07/18 4:34 p.m.305 views

CVE-2025-7783

CVE-2025-7783 affects node-form-data; vulnerable versions include

9.4CVSS6.6AI score0.01735EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/18 4:34 p.m.9 views

CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.5AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/07/18 4:34 p.m.14 views

CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.1AI score0.01735EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.9 views

PT-2025-30061

Name of the Vulnerable Software and Affected Versions form-data versions 2.5.4 form-data versions 3.0.0 through 3.0.3 form-data versions 4.0.0 through 4.0.3 Description A vulnerability exists in the form-data JavaScript library due to the use of insufficiently random values when generating bounda...

9.4CVSS6.6AI score0.01735EPSS
SaveExploits1References124
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.4 views

form-data 安全漏洞

Form-Data is a FormData open source module for creating readable form data streams. It can be used for form submissions and file uploads to other web applications. A security vulnerability exists in form-data versions prior to 2.5.4, 3.0.0 through 3.0.3, and 4.0.0 through 4.0.3, which stems from ...

9.4CVSS5.6AI score0.01735EPSS
SaveExploits1References2
OSV
OSV
added 2025/07/17 7:40 p.m.6 views

GHSA-HFJ7-542Q-8FVV DiracX-Web is vulnerable to attack through an Open Redirect on its login page

Summary An attacker can forge a request to redirect an authenticated user to any arbitrary website. Details On the login page, we have a redirect field which is the location where the server will redirect the user. This URI is not verified, and can be an arbitrary URI. Paired with a parameter...

4.7CVSS6.1AI score0.00332EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/07/17 7:40 p.m.9 views

DiracX-Web is vulnerable to attack through an Open Redirect on its login page

Summary An attacker can forge a request to redirect an authenticated user to any arbitrary website. Details On the login page, we have a redirect field which is the location where the server will redirect the user. This URI is not verified, and can be an arbitrary URI. Paired with a parameter...

4.7CVSS6.2AI score0.00332EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/07/17 3:15 p.m.9 views

CVE-2025-54066

DiracX-Web is a web application that provides an interface to interact with the DiracX services. Prior to version 0.1.0-a8, an attacker can forge a request that they can pass to redirect an authenticated user to another arbitrary website. In the login page, DiracX-Web has a redirect field which i...

4.7CVSS0.00332EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.7 views

PT-2025-29920 · Unknown · Diracx-Web

Name of the Vulnerable Software and Affected Versions: DiracX-Web versions prior to 0.1.0-a8 Description: DiracX-Web is a web application that provides an interface to interact with the DiracX services. An attacker can forge a request to redirect an authenticated user to an arbitrary website. The...

4.7CVSS6.2AI score0.00332EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 5:13 p.m.16 views

CVE-2020-8087

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...

10CVSS7.4AI score0.06347EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/04 12:7 p.m.17 views

CVE-2024-47651 Parameter Pollution Vulnerability

This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple “userid” parameters in the API request body leading to unauthorized access of sensitive...

7.1CVSS6.4AI score0.00432EPSS
SaveExploits0References1
Rows per page
Query Builder