Lucene search
+L

125214 matches found

OSV
OSV
added 2026/06/22 7:28 p.m.12 views

GO-2026-5060 Gotenberg: SSRF via LibreOffice document processing in github.com/gotenberg/gotenberg

Gotenberg: SSRF via LibreOffice document processing in github.com/gotenberg/gotenberg...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/22 6:59 p.m.17 views

EUVD-2026-38344

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS5.8AI score0.00345EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2026/06/22 6:59 p.m.18 views

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS5.8AI score0.00345EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2026/06/22 6:59 p.m.9 views

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS5.9AI score0.00345EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2026/06/22 6:59 p.m.75 views

CVE-2026-48931

CVE-2026-48931 describes a flaw in Node.js HTTP Agent where a client may treat a response as valid if it is sent before the client issues a request. Affected are all supported Node.js lines (22, 24, 26). The documented impact is low severity (CVSS v3.0 base score 3.7) with no confidentiality or a...

3.7CVSS5.9AI score0.00345EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/06/22 6:59 p.m.9 views

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS7AI score
SaveExploits0References6
OSV
OSV
added 2026/06/22 6:16 p.m.7 views

PYSEC-2026-248

Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/22 6:16 p.m.14 views

CVE-2026-54282

Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...

5.3CVSS0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/22 6:16 p.m.17 views

CVE-2026-54275

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain, but with different per-request serverhostname...

7.5CVSS0.00266EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/22 6:16 p.m.6 views

PYSEC-2026-237

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain, but with different per-request serverhostname...

7.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/22 6:16 p.m.22 views

CVE-2026-50269

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to inject additional headers or similar. In the unlikely situation that an application is passing...

7.5CVSS0.00301EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/22 6:16 p.m.8 views

DEBIAN-CVE-2026-50184

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

6.1CVSS5.9AI score0.00151EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/22 6:16 p.m.7 views

PYSEC-2026-2106

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to inject additional headers or similar. In the unlikely situation that an application is passing...

7.5CVSS6.1AI score0.00301EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/22 6:16 p.m.17 views

CVE-2026-50169

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

6.1CVSS0.00165EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/22 6:16 p.m.17 views

CVE-2026-50184

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

6.1CVSS0.00151EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/22 6:16 p.m.9 views

CVE-2026-54278

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to be decompressed into memory in one chunk. An attacker may be able to send a compressed payload in specific situations that could be...

8.7CVSS6.1AI score0.00397EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/22 6:16 p.m.7 views

UBUNTU-CVE-2026-42127

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access tok...

7.5CVSS5.9AI score0.00432EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/22 6:16 p.m.8 views

CVE-2026-50269

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to inject additional headers or similar. In the unlikely situation that an application is passing...

7.5CVSS6.1AI score0.00301EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/22 6:16 p.m.7 views

CVE-2026-54275

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain, but with different per-request serverhostname...

7.5CVSS6.1AI score0.00266EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/22 6:16 p.m.14 views

CVE-2026-50184

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

6.1CVSS6.1AI score0.00151EPSS
SaveExploits0References1
Rows per page
Query Builder