Lucene search
K

12 matches found

Vulnrichment
Vulnrichment
added 2026/05/13 6:46 p.m.4 views

CVE-2026-33585 Arqit SKA-Platform Improper Handling of Parameters Vulnerability

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

3.8CVSS5.8AI score0.00006EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/23 1:54 p.m.3 views

CVE-2026-35225 Improper timeout handling in CODESYS EtherNetIP

An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections...

8.7CVSS5.8AI score0.00203EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/14 12:0 a.m.2 views

Sagemcom FAST3686 Code Issue Vulnerability

Sagemcom FAST3686 is a cable gateway from Sagemcom. A code issue vulnerability exists in the Sagemcom FAST3686 that stems from the presence of a session timeout insufficiency issue that allows a local attacker to access the management panel without requiring login credentials...

7.8CVSS6.8AI score0.0003EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.4 views

SUSE CVE-2010-2068

modproxyhttp.c in modproxyhttp in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive...

5CVSS8.9AI score0.08537EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2022/02/02 1:51 p.m.1 views

undertow: client side invocation timeout raised when calling over HTTP2

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks...

7.5CVSS5.7AI score0.00251EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.2 views

The vulnerability of Firefox’s requestPointerLock() and setTimeout() methods allows a intruder to gain unauthorized access to protected information.

The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

5.4CVSS5.5AI score
Exploits0References7Affected Software4
CNNVD
CNNVD
added 2021/05/13 12:0 a.m.2 views

Elastic Stack Kibana 代码问题漏洞

Elastic Stack Kibana is an application from the American company Elastic Stack. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through Elastic Stack. A security vulnerability exists in Kibana prior to versions 7.12.0 and 6.8.15. The...

3.6CVSS5.1AI score0.00049EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2016/04/05 10:20 p.m.5 views

EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client

A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open denial of service...

7.5CVSS7.1AI score0.01813EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2016/04/05 8:39 p.m.7 views

EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client

A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open denial of service...

7.5CVSS7.1AI score0.01813EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2016/04/05 8:39 p.m.4 views

EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client

A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open denial of service...

7.5CVSS7.1AI score0.01813EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2016/04/05 8:37 p.m.6 views

EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client

A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open denial of service...

7.5CVSS7.1AI score0.01813EPSS
Exploits0References4
OSV
OSV
added 2012/08/27 11:55 p.m.2 views

DEBIAN-CVE-2012-3421

The pduread function in pdu.c in libpcp in Performance Co-Pilot PCP before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service pmcd hang by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."...

5CVSS6.8AI score0.02459EPSS
Exploits0References1
Rows per page
Query Builder