Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.6 views

PT-2026-40763

Name of the Vulnerable Software and Affected Versions cowboy versions 2.0.0 through 2.14.x Description An issue in multipart header parsing allows an unauthenticated attacker to cause a denial of service via unbounded buffer accumulation. The function read part in src/cowboy req.erl accumulates...

8.2CVSS5.9AI score0.00023EPSS
Exploits0References21
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.3 views

PT-2026-32915

Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main/inc/ajax/install.ajax.php is accessible without authentication on fully installed instances because, unlike other AJAX endpoints, it does not include the global.inc.php file that performs...

7.2CVSS5.8AI score0.00166EPSS
Exploits1References4
CBLMariner
CBLMariner
added 2026/01/20 9:41 p.m.3 views

CVE-2026-21441 affecting package python-urllib3 for versions less than 2.0.7-4

CVE-2026-21441 affecting package python-urllib3 for versions less than 2.0.7-4. A patched version of the package is available...

8.9CVSS5.5AI score0.00032EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24988

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00072EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/18 12:0 a.m.5 views

PT-2023-8903

Name of the Vulnerable Software and Affected Versions Rack versions 2.0.0 through 2.0.9.1 Rack versions 2.1.0 through 2.1.4.1 Rack versions 2.2.0 through 2.2.4.0 Rack versions 3.0.0 through 3.0.0.0 Description A denial of service vulnerability in the multipart parsing component of Rack could allo...

10CVSS6.8AI score0.16071EPSS
Exploits4References90
CNNVD
CNNVD
added 2020/12/30 12:0 a.m.1 views

Linbit csync2 输入验证错误漏洞

Linbit csync2 is a cluster synchronization tool from Austrian company Linbit, which is mainly used to keep files on multiple hosts in a cluster synchronized. A security vulnerability exists in LINBIT csync2 version 2.0 and earlier versions, which stems from a failure to properly check the return...

5.3CVSS5.8AI score0.00666EPSS
Exploits0References6
CNVD
CNVD
added 2018/01/05 12:0 a.m.2 views

QuickApps CMS Cross-Site Scripting Vulnerability

QuickApps CMS is a PHP-based, open source, modular content management system. A cross-site scripting vulnerability exists in the user's real name field in QuickApps CMS version 2.0.0. A remote attacker can exploit this vulnerability to cause a denial of service and perform unauthorized operations...

5.4CVSS6.3AI score0.00206EPSS
Exploits1References1
CNVD
CNVD
added 2016/08/09 12:0 a.m.1 views

Wireshark UMTS FP Parser Denial of Service Vulnerability (CNVD-2016-06208)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability in the epan/dissectors/packet-umtsfp.c file in the UMTS FP pars...

5.9CVSS7.5AI score0.00278EPSS
Exploits0References1
Rows per page
Query Builder