Lucene search
+L

308 matches found

BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•9 views

The vulnerability of the Node.js software platform’s permission model, related to deficiencies in HTTP request processing, allows attackers to circumvent existing security restrictions and send unauthorized requests.

The vulnerability of the Node.js software platform’s permission model is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and send unauthorized requests...

6.5CVSS7.2AI score0.00505EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•10 views

The vulnerability of the WEBrick HTTP-server’s toolset, related to HTTP request processing flaws, allows attackers to execute the “HTTP request hijacking” attack.

The vulnerability of the WEBrick HTTP-server’s tools is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out an “HTTP request hijacking” attack...

7.8CVSS6.8AI score0.00393EPSS
SaveExploits0References7Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•19 views

The vulnerability of the Pingora proxy server, related to HTTP request processing flaws, allows attackers to execute arbitrary code.

The vulnerability of the Pingora proxy server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS6.4AI score0.00499EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/11 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: sanitize request list handling Validate the request in nvmetcphandler2t to ensure it's not part of any list, otherwise a malicious R2T PDU might injec...

9.8CVSS6.8AI score0.00308EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/07/28 12:00 a.m.•23 views

D-Link DIR-513 formLanguageChange function buffer overflow vulnerability

D-Link DIR-513 is a portable wireless router that focuses on thin and light design and easy-to-use features, and supports IEEE 802.11n, 802.11g/b standards with a maximum transmission rate of 300Mbps. The D-Link DIR-513 suffers from a buffer overflow vulnerability that stems from improper handlin...

9.8CVSS8.2AI score0.16688EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/27 12:00 a.m.•14 views

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender manufactured by China's Gion Electronics TOTOLINK, mainly used to extend Wi-Fi coverage. The device supports Wi-Fi 6 technology and offers AX1500 wireless transmission rate for home and small office scenarios. A buffer overflow vulnerability exists in t...

9CVSS7.7AI score0.01079EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the request processing path...

5.5CVSS8AI score0.00157EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/07/09 12:00 a.m.•7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nvme-tcp unvalidated request lists, which could lead to a request processing loop...

5.5CVSS6.4AI score0.00308EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•15 views

The vulnerability of the Response Header Handler component in the Craft CMS system allows a hacker to execute arbitrary code.

The vulnerability of the Response Header Handler component in the Craft CMS content management system is related to errors in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.3CVSS8.4AI score0.01349EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/02 12:00 a.m.•20 views

The vulnerability of the request processing function in TOTOLINK A702R router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the request processing function in TOTOLINK A702R router microprogramming systems lies in the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service...

9CVSS7.9AI score0.00961EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/26 12:00 a.m.•18 views

The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite, related to errors in request processing, allows a hacker to disclose sensitive information.

The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.8CVSS5.4AI score0.00344EPSS
SaveExploits0References3Affected Software1
Redos
Redos
•added 2025/06/19 12:00 a.m.•13 views

ROS-20250619-08

The h11 library vulnerability is related to flaws in HTTP request processing. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality and integrity of protected information. of protected information...

9.1CVSS6.7AI score0.00584EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/06/09 12:00 a.m.•15 views

The vulnerability of the GNOME graphical interface library libsoup allows a attacker to perform a “HTTP request hijacking” attack.

The vulnerability of the GNOME graphical interface’s libsoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out an “HTTP request hijacking” attack...

7.8CVSS7.2AI score0.00776EPSS
SaveExploits1References21Affected Software10
BDU FSTEC
BDU FSTEC
•added 2025/06/02 12:00 a.m.•19 views

The vulnerability of the h11 library, related to deficiencies in HTTP request processing, allows attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the h11 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

9.4CVSS7.2AI score0.00584EPSS
SaveExploits0References7Affected Software4
Citrix
Citrix
•added 2025/04/16 12:00 a.m.•23 views

Netscaler-14.1- How NetScaler handles expect:100 continue header

When NetScaler gets an HTTP request that includes the Expect: 100-Continue header, it sends a 100 Continue response back to the client. This step is important because NetScaler’s Application Firewall needs to review the full request—including the body—before passing it on to the backend server...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•16 views

The vulnerability of the Go programming language’s net/http package, related to deficiencies in HTTP request processing, allows attackers to execute arbitrary code.

The vulnerability of the net/http package in the Go programming language is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS7.3AI score0.00811EPSS
SaveExploits0References6Affected Software6
BDU FSTEC
BDU FSTEC
•added 2025/04/04 12:00 a.m.•16 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the insufficient processing of incoming requests, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the insufficient checking of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.5CVSS7AI score0.00299EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/03 8:15 p.m.•42 views

CVE-2025-29462

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack...

9.8CVSS0.00554EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/04/03 12:00 a.m.•42 views

CVE-2025-29462

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack...

0.00554EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•20 views

PT-2025-14788 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda Ac15 version 15.13.07.13 Description: A buffer overflow issue has been discovered. It occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer ...

9.8CVSS9.6AI score0.00554EPSS
SaveExploits1References5
Rows per page
Query Builder