Lucene search
+L

25533 matches found

OSV
OSV
added 2025/12/31 7:15 p.m.11 views

UBUNTU-CVE-2025-34468

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

9.8CVSS6.7AI score0.00731EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 p.m.11 views

CVE-2025-34468

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

9.8CVSS6.9AI score0.00731EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/31 6:39 p.m.5 views

CVE-2025-34468 libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

8.2CVSS7.9AI score0.00731EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/31 6:39 p.m.130 views

CVE-2025-34468

CVE-2025-34468 affects libcoap versions up to 4.3.5, prior to commit 30db3ea. A stack-based buffer overflow occurs in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer, due to insufficient bounds checking. A remote crash and potential remote co...

9.8CVSS7.9AI score0.00731EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/12/31 6:39 p.m.40 views

CVE-2025-34468 libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

8.2CVSS0.00731EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/31 6:39 p.m.9 views

CVE-2025-34468 libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

8.2CVSS7AI score
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2025/12/31 6:39 p.m.6 views

CVE-2025-34468

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

9.8CVSS8.3AI score0.00731EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/31 4:15 p.m.17 views

CVE-2025-62126

Insertion of Sensitive Information Into Sent Data vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching vcaching allows Retrieve Embedded Sensitive Data.This issue affects Varnish/Nginx Proxy Caching: from n/a through = 1.8.3...

5.3CVSS0.00721EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 3:36 p.m.51 views

CVE-2025-62126

CVE-2025-62126 affects Varnish/Nginx Proxy Caching (versions from n/a up to 1.8.3). Root cause: Insertion of Sensitive Information Into Sent Data, enabling exposure of embedded sensitive data via the proxy. Impact: sensitive information exposure via cached responses. Exploit details are not provi...

5.3CVSS5.9AI score0.00721EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 3:36 p.m.45 views

CVE-2025-62126 WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching vcaching allows Retrieve Embedded Sensitive Data.This issue affects Varnish/Nginx Proxy Caching: from n/a through = 1.8.3...

5.3CVSS0.00721EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 3:36 p.m.31 views

EUVD-2025-206012

Insertion of Sensitive Information Into Sent Data vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching allows Retrieve Embedded Sensitive Data.This issue affects Varnish/Nginx Proxy Caching: from n/a through 1.8.3...

5.3CVSS6.4AI score0.00721EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 3:36 p.m.6 views

CVE-2025-62126 WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching allows Retrieve Embedded Sensitive Data.This issue affects Varnish/Nginx Proxy Caching: from n/a through 1.8.3...

5.3CVSS6.5AI score0.00721EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 3:27 p.m.16 views

WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin Varnish/Nginx Proxy Caching versions = 1.8.3...

5.3CVSS6.8AI score0.00721EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/31 1:23 p.m.19 views

CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails Mitigation To mitigate this issue, prevent module sunrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to...

6.5CVSS5.4AI score0.0025EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/31 12:31 a.m.17 views

SUSE CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

5.5CVSS6.5AI score0.0025EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.11 views

EulerOS Virtualization 2.13.0 : python-pip (EulerOS-SA-2025-2616)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers...

6.1CVSS6.8AI score0.02974EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.8 views

EulerOS Virtualization 2.13.1 : python-pip (EulerOS-SA-2025-2630)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers...

6.1CVSS6.8AI score0.02974EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin Varnish/Nginx Proxy Caching 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.3AI score0.00721EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-34468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostna...

9.8CVSS6.7AI score0.00731EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2022-50821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: Don't leak netobj memory when gssreadproxyverf fails CVE-2022-50821 Note that Nessus relies on the presence of the package as reported by the vendor...

5.9AI score0.0025EPSS
SaveExploits0References3
Rows per page
Query Builder