Lucene search
+L

3541 matches found

NVD
NVD
added 2026/03/27 8:16 p.m.10 views

CVE-2026-33870

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versions 4.1.132.Final and 4.2.10.Final fi...

7.5CVSS0.0064EPSS
SaveExploits1References23
CVE
CVE
added 2026/03/27 7:54 p.m.694 views

CVE-2026-33870

Netty HTTP request smuggling vulnerability (CVE-2026-33870) arises from how Netty versions prior to 4.1.132.Final and 4.2.10.Final parse quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. The IBM and OSS/Ecosystem advisories in the connected...

7.5CVSS5.8AI score0.0064EPSS
SaveExploits1References23Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/27 7:54 p.m.4 views

CVE-2026-33870 Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versions 4.1.132.Final and 4.2.10.Final fi...

7.5CVSS5.8AI score0.0064EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/27 3:37 p.m.5 views

GHSA-GFHQ-7499-F3F2 TSPortal: Any user can forge self-deletion requests for any account

Summary Conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. Details Creating a DPA report about another user and leaving the evidence field empty causes that report to look like the reported user self-requested deletion of their data. Ingenuine repo...

8.4CVSS6AI score0.00262EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/03/27 3:37 p.m.17 views

TSPortal: Any user can forge self-deletion requests for any account

Summary Conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. Details Creating a DPA report about another user and leaving the evidence field empty causes that report to look like the reported user self-requested deletion of their data. Ingenuine repo...

8.4CVSS6AI score0.00262EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/03/26 8:0 p.m.46 views

CVE-2026-2239

The CVE-2026-2239 entry concerns GIMP. A heap-buffer-overflow occurs in fread_pascal_string when handling crafted PSD files, caused by a Pascal string buffer not being properly null-terminated, leading to an out-of-bounds read and potential application crash (DoS). Public notes across multiple so...

6.5CVSS7.2AI score0.00485EPSS
SaveExploits1References3Affected Software2
Github Security Blog
Github Security Blog
added 2026/03/26 6:48 p.m.27 views

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Summary Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Background This vulnerability is a new variant discovered during research into the "Funky Chunks" HTTP request smuggling techniques: - - The original researc...

7.5CVSS6AI score0.0064EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:4 p.m.16 views

CVE-2026-25573

A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise...

8.6CVSS6AI score0.00391EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:59 p.m.8 views

CVE-2026-28461

OpenClaw versions prior to 2026.3.1 contain an unbounded memory growth vulnerability in the Zalo webhook endpoint that allows unauthenticated attackers to trigger in-memory key accumulation by varying query strings. Remote attackers can exploit this by sending repeated requests with different que...

8.7CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/03/26 12:0 a.m.170 views

📄 V8 StringToBigInt Memory Corruption Sandbox Bypass

V8 suffers from a sandbox bypass vulnerability due to memory corruption during StringToBigInt conversion. The function v8::internal::StringToBigInt is used by V8 when converting a string to a BigInt e.g. via BigInt“1337”. It first parses the string into individual digitt’s in the...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/25 2:34 p.m.10 views

CVE-2026-4371

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were...

8.2CVSS5.6AI score0.0036EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2026/03/25 10:19 a.m.5 views

Maintenance update for Multi-Linux Manager 4.3: Server, Proxy and Retail

Description: This update fixes the following issues: mgr-cfg: Version 4.3.7-0 Non-customer-facing optimization and update mgr-custom-info: Version 4.3.4-0 Non-customer-facing optimization and update mgr-daemon: Version 4.3.13-0 Update translation strings mgr-osad: Version 4.3.8-0...

8.7CVSS5.9AI score0.00248EPSS
SaveExploits1References110
OSV
OSV
added 2026/03/25 10:10 a.m.4 views

SUSE-SU-2026:1010-1 Security update 5.0.7 for Multi-Linux Manager Server

This update fixes the following issues: branch-network-formula: - Update to version 1.1.0 Enable containers on SLE15SP7 Exclude podman interfaces from sysctl setting cobbler: - Compatibility fixes for tftpboot directory setup inter-server-sync: - Version 0.3.10-0 Write log to a rotated file witho...

7.5CVSS7.1AI score0.00248EPSS
SaveExploits1References43
NVD
NVD
added 2026/03/25 1:17 a.m.5 views

CVE-2026-20639

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption...

7.5CVSS0.00599EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/25 12:32 a.m.6 views

CVE-2026-20639

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption...

5.8AI score0.00599EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.15 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An integer overflow vulnerability exists in Apple macOS, which can be exploited by an attacker to cause heap corruption when processing malicious strings...

7.5CVSS5.9AI score0.00599EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-33169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. NumberToDelimitedConverter uses a lookahead-based...

6.9CVSS5.5AI score0.00498EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/24 9:16 p.m.3 views

DEBIAN-CVE-2026-4371

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking...

7.4CVSS7.9AI score0.0036EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/03/24 8:27 p.m.11 views

CVE-2026-4371

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking...

7.4CVSS7.2AI score0.0036EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/24 5:50 p.m.6 views

Security Bulletin: IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information (CVE-2025-14808)

Summary A sensitive information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-14808 DESCRIPTION: InfoSphere Information Server could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to...

3.1CVSS5.8AI score0.00225EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder