Lucene search
+L

2742 matches found

BDU FSTEC
BDU FSTEC
•added 2026/05/12 12:00 a.m.•16 views

The vulnerability of the intermediate software StripPrefixRegex of the Containous Traefik reverse proxy server allows a hacker to access protected information.

The vulnerability of the intermediate software program StripPrefixRegex of the Containous Traefik reverse proxy server is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

8.5CVSS8.2AI score0.0072EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/05/11 4:12 p.m.•106 views

GHSA-3G8H-86W9-WVMQ Next.js's Middleware / Proxy redirects can be cache-poisoned

Impact Next.js uses the x-nextjs-data request header for internal data requests. On affected versions, an external client could send this header on a normal request to a path handled by middleware that returns a redirect. When that happened, the middleware/proxy could treat the request as a data...

3.7CVSS5.6AI score0.00203EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/11 5:44 a.m.•10 views

BIT-GOLANG-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/05/11 12:00 a.m.•10 views

Unity Linux 20.1060e / 20.1070e Security Update: tomcat (UTSA-2026-017511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017511 advisory. Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances...

5.3CVSS7AI score0.74667EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2026/05/09 2:43 a.m.•24 views

SUSE CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2026/05/08 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-39825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses...

5.3CVSS6.4AI score0.00413EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/07 9:30 p.m.•35 views

EUVD-2026-28425

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.8AI score0.00413EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/07 8:16 p.m.•50 views

DEBIAN-CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS6.6AI score0.00413EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/07 8:16 p.m.•57 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS0.00413EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/05/07 8:16 p.m.•18 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References7
OSV
OSV
•added 2026/05/07 8:16 p.m.•16 views

UBUNTU-CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/05/07 7:41 p.m.•14 views

CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.8AI score0.00413EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/07 7:41 p.m.•62 views

CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

0.00413EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/05/07 7:41 p.m.•41 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0
CVE
CVE
•added 2026/05/07 7:41 p.m.•119 views

CVE-2026-39825

The Go programming language 's built-in ReverseProxy component is vulnerable to a logic error where it fails to account for the url.ParseQuery limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N). This allows ReverseProxy to forward a request containing query ...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/05/07 7:41 p.m.•102 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.8AI score0.00413EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2026/05/07 7:41 p.m.•40 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0
OSV
OSV
•added 2026/05/07 7:21 p.m.•29 views

GO-2026-4976 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/07 7:21 p.m.•18 views

Information Exposure

Overview std/net/http/httputil is a Go standard library package std/net/http/httputil Affected versions of this package are vulnerable to Information Exposure. Go Vulnerability Report: ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrit...

6.9CVSS5.8AI score0.00413EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/07 5:06 a.m.•17 views

MGASA-2026-0119 Updated perl-Starman packages fix security vulnerability

Starman versions before 0.4018 for Perl allow HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

7.5CVSS5.8AI score0.00539EPSS
SaveExploits0References5
Rows per page
Query Builder