35503 matches found
CVE-2021-47752
AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests. Attackers can generate high-volume requests to multiple endpoints including /mysqladmin to potentially crash or render the...
CVE-2021-47752 AWebServer GhostBuilding 18 - Denial of Service (DoS)
AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests. Attackers can generate high-volume requests to multiple endpoints including /mysqladmin to potentially crash or render the...
CVE-2021-47752 AWebServer GhostBuilding 18 - Denial of Service (DoS)
AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests. Attackers can generate high-volume requests to multiple endpoints including /mysqladmin to potentially crash or render the...
CVE-2021-47752
CVE-2021-47752 affects AWebServer GhostBuilding 18. The vulnerability is a denial-of-service condition that allows remote attackers to overwhelm the server by issuing multiple concurrent HTTP requests, potentially targeting endpoints such as /mysqladmin and crashing or rendering the service unres...
CVE-2026-22237
The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the APIs exposed by the documentation. Successful exploitation of this vulnerability...
Denial Of Service (DoS)
aiohttp is vulnerable to a Denial of Service DoS. The vulnerability is due to improper handling of crafted requests in the Request.post method, which allows an attacker to exhaust server memory and freeze the AIOHTTP server during request processing...
CVE-2025-15376
The Stopwords for comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the 'setstopwordsforcomments' and 'deletestopwordsforcomments' functions. This makes it possible for unauthenticated...
SUSE CVE-2025-68805
In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to...
CVE-2025-70747
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub65A28 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-71021
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub65A28 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
PT-2026-3181
Grocery Crud 1.6.4 contains a SQL injection vulnerability in the order by parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the order by parameter in POST requests to the ajax list endpoint to potentially extract or modify...
EUVD-2026-2794
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
VulnCheck KEV: CVE-2025-64155
An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute...
EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-1099)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiati...
Sylkat AWebServer GhostBuilding security vulnerability
Sylkat AWebServer GhostBuilding is a built-in website building assistant module from Sylkat Corporation. Version 18 of Sylkat AWebServer GhostBuilding contains a security vulnerability. This vulnerability arises from the possibility of overloading the server when multiple concurrent HTTP requests...
PT-2026-3158
Name of the Vulnerable Software and Affected Versions Redragon Gaming Mouse driver affected versions not specified Description The Redragon Gaming Mouse driver has a flaw at the kernel level. An attacker can cause a denial of service by sending specially crafted IOCTL requests. Specifically,...
EulerOS 2.0 SP12 : haproxy (EulerOS-SA-2026-1089)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002399)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002399 advisory. Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002981)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002981 advisory. The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote...
EulerOS 2.0 SP12 : haproxy (EulerOS-SA-2026-1069)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON...