Lucene search
+L

1501 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:42 p.m.13 views

CVE-2021-37049

There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects...

9.8CVSS7.4AI score0.00866EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.10 views

CVE-2020-36519

Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs...

4.9CVSS6.8AI score0.00815EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 5:17 a.m.10 views

CVE-2011-1136

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file...

6.3CVSS6.9AI score0.00451EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:57 a.m.10 views

CVE-2016-11050

An issue was discovered on Samsung mobile devices with S3KK, Note2KK, S4L, Note3L, and S5L software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 March 2016...

4.3CVSS7AI score0.00281EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 3:14 p.m.15 views

CVE-2025-48262

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS5.9AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 3:15 p.m.25 views

CVE-2025-48262

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 2:45 p.m.9 views

CVE-2025-48262 WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS5.9AI score0.00277EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 2:45 p.m.28 views

CVE-2025-48262 WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 2:45 p.m.36 views

CVE-2025-48262

URL Rewrite Analyzer (WordPress plugin) versions

4.3CVSS5.9AI score0.00277EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2025/05/19 2:42 a.m.30 views

K000151397: Apache Tomcat vulnerabilities CVE-2025-31650, CVE-2025-31651

Security Advisory Description CVE-2025-31650 Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger a...

9.8CVSS7.6AI score0.5992EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.9 views

PT-2025-21973 · Unknown · Url Rewrite Analyzer

Name of the Vulnerable Software and Affected Versions: Url Rewrite Analyzer versions 1.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Url Rewrite Analyz...

4.3CVSS4.4AI score0.00277EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.7 views

WordPress plugin Url Rewrite Analyzer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS4.9AI score0.00277EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2025/05/19 12:0 a.m.23 views

K000151411: Apache Tomcat vulnerability CVE-2025-31651

Security Advisory Description CVE-2025-31650 Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger a...

9.8CVSS9.3AI score0.5992EPSS
SaveExploits6Affected Software36
Tenable Nessus
Tenable Nessus
added 2025/05/16 12:0 a.m.15 views

Apache Tomcat 11.0.0-M1 < 11.0.6 Multiple Vulnerabilities

The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.104, 10.1.0-M1 prior to 10.1.40 or 11.0.0-M1 prior to 11.0.6. It is, therefore, affected by multiple vulnerabilities : - A denial of service via invalid HTTP priority header. CVE-2025-31650 - A rewrite rule bypass...

9.8CVSS9.8AI score0.5992EPSS
SaveExploits6References3
Tenable Nessus
Tenable Nessus
added 2025/05/16 12:0 a.m.50 views

Apache Tomcat 9.0.0-M1 < 9.0.104 Multiple Vulnerabilities

The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.104, 10.1.0-M1 prior to 10.1.40 or 11.0.0-M1 prior to 11.0.6. It is, therefore, affected by multiple vulnerabilities : - A denial of service via invalid HTTP priority header. CVE-2025-31650 - A rewrite rule bypass...

9.8CVSS9.8AI score0.5992EPSS
SaveExploits6References3
Tenable Nessus
Tenable Nessus
added 2025/05/16 12:0 a.m.22 views

Apache Tomcat 10.1.0-M1 < 10.1.40 Multiple Vulnerabilities

The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.104, 10.1.0-M1 prior to 10.1.40 or 11.0.0-M1 prior to 11.0.6. It is, therefore, affected by multiple vulnerabilities : - A denial of service via invalid HTTP priority header. CVE-2025-31650 - A rewrite rule bypass...

9.8CVSS9.8AI score0.5992EPSS
SaveExploits6References3
Amazon
Amazon
added 2025/05/13 12:0 a.m.10 views

Important: tomcat9

Issue Overview: Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException...

9.8CVSS7.3AI score0.5992EPSS
SaveExploits6
Amazon
Amazon
added 2025/05/13 12:0 a.m.11 views

Important: tomcat10

Issue Overview: Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException...

9.8CVSS7.3AI score0.5992EPSS
SaveExploits6
Citrix
Citrix
added 2025/05/12 12:0 a.m.18 views

GUI Issue - Unbinding the LogAction from Rewrite policy fails from GUI but works from Cli

Re-Write Policy is configured with a Log Action bound to it. When the Log Action is removed from the policy via the GUI, the policy is not actually removed. After hitting 'OK', there's no error, and the Log Action is still bound when checked again...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/09 9:32 p.m.31 views

CVE-2025-46821

Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the character from a set of valid characters in the URI path. As a result URI path containing the character will not match a URI template...

5.3CVSS6.7AI score0.00263EPSS
SaveExploits0References1
Rows per page
Query Builder