Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/02/27 4:13 a.m.2 views

CVE-2026-27933

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS5.4AI score0.00055EPSS
Exploits1References1
NVD
NVD
added 2026/02/26 12:16 a.m.6 views

CVE-2026-27933

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS0.00055EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/25 11:16 p.m.2 views

CVE-2026-27933

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS5.4AI score0.00055EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2026/02/25 11:16 p.m.2 views

EUVD-2026-8776

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS5.4AI score0.00055EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/02/25 11:16 p.m.16 views

CVE-2026-27933 Manyfold vulnerable to session hijack via cookie leakage in proxy caches

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS0.00055EPSS
Exploits1References2
CVE
CVE
added 2026/02/25 11:16 p.m.8 views

CVE-2026-27933

CVE-2026-27933 affects Manyfold, an open‑source self-hosted web app for 3D models. Versions prior to 0.133.0 are vulnerable to a session hijack via cookie leakage in proxy caches; attacking actor could exploit exposed cookies to hijack sessions. The CVSS score provided is 6.8 (Medium) with networ...

6.8CVSS5.4AI score0.00055EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/25 11:16 p.m.2 views

CVE-2026-27933 Manyfold vulnerable to session hijack via cookie leakage in proxy caches

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS5.4AI score0.00055EPSS
Exploits1References2
OSV
OSV
added 2026/02/25 11:16 p.m.2 views

CVE-2026-27933 Manyfold vulnerable to session hijack via cookie leakage in proxy caches

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue...

6.8CVSS5.5AI score0.00055EPSS
Exploits1References4
CNVD
CNVD
added 2025/09/16 12:0 a.m.3 views

Unspecified vulnerability in curl (CNVD-2025-21413)

curl is cURL open source a tool for transferring data from or to the server . There is a security vulnerability in curl that can be exploited by attackers that may cause malicious server-induced traffic to be mistaken for real HTTP traffic by proxy servers, thereby polluting their caches...

5.3CVSS6.5AI score0.00219EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-37027

Name of the Vulnerable Software and Affected Versions: curl affected versions not specified Description: The websocket code in curl did not update the 32-bit mask pattern for each new outgoing frame, as required by the specification. Instead, a fixed mask was used throughout the entire connection...

7.5CVSS7.3AI score0.00275EPSS
Exploits1References36
RedHat Linux
RedHat Linux
added 2017/04/12 12:24 p.m.1 views

httpd: Apache HTTP Request Parsing Whitespace Defects

It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a...

7.5CVSS6.8AI score0.0978EPSS
Exploits0References5
Rows per page
Query Builder