Lucene search
K

6 matches found

OSV
OSV
added 2026/03/27 5:45 p.m.4 views

BIT-NATS-2026-33218 NATS has pre-auth server panic via leafnode handling

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, a client which can connect to the leafnode port can crash the nats-server with a certain malformed message pre-authentication. Versions 2.11.15 and 2.12.6 contain ...

7.5CVSS5.9AI score0.00066EPSS
Exploits0References3
OSV
OSV
added 2026/02/02 11:12 p.m.3 views

GHSA-JG68-VHV3-9R8F Magento's X-Original-Url header can expose admin url

Impact The admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. Patches The bug comes from the Zend library and is patche by unsetting the header in the bootstrap process. Workarounds Unset the X-Original-Url header i...

5.3CVSS5.4AI score0.0001EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/10 12:0 a.m.4 views

PT-2025-37074

Name of the Vulnerable Software and Affected Versions: Indico versions prior to 3.3.8 Description: Indico is an event management system that utilizes Flask-Multipass, a multi-backend authentication system for Flask. A broken access check in a legacy API used to retrieve user details allowed...

4.3CVSS6.5AI score0.00052EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/11/21 12:0 a.m.1 views

PT-2022-23200 · Immudb · Immudb

Name of the Vulnerable Software and Affected Versions: immudb versions prior to 1.4.1 Description: immudb is a database with built-in cryptographic proof and verification. A malicious immudb server can provide a falsified proof that will be accepted by the client SDK, signing a falsified...

5.4CVSS5AI score0.00126EPSS
Exploits1References15
OSV
OSV
added 2022/11/11 7:15 p.m.0 views

UBUNTU-CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS5.7AI score0.00352EPSS
Exploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/06/14 12:0 a.m.26 views

JVN#96052093: ETX-R vulnerable to denial-of-service (DoS)

ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Impact A remote unauthenticated attacker may cause the web server on the product to be terminated abnormally. Solution Apply a Workaround The following workarounds may mitigate the...

5.3CVSS5.3AI score0.00503EPSS
Exploits0
Rows per page
Query Builder