Lucene search
+L

6 matches found

UbuntuCve
UbuntuCve
•added 2026/09/02 8:17 p.m.•8 views

CVE-2026-84292

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

7.5CVSS5.3AI score0.0038EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/02 8:09 p.m.•63 views

CVE-2026-84292

fast-uri , a URI library in the Fastify ecosystem, fails to validate the port component when serializing an authority. The recomposeAuthority function concatenates the port verbatim without escaping, so a crafted non-digit value (e.g., containing @) can inject authority delimiters, demoting the i...

7.5CVSS5.9AI score0.0038EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/09/02 8:09 p.m.•45 views

CVE-2026-84292 fast-uri vulnerable to authority injection via an unvalidated port in serialize

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

7.5CVSS0.0038EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/02 8:09 p.m.•13 views

CVE-2026-84292 fast-uri vulnerable to authority injection via an unvalidated port in serialize

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

7.5CVSS5.3AI score0.0038EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/02 8:09 p.m.•10 views

CVE-2026-84292

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

7.5CVSS5.4AI score0.0038EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•19 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of validation for the portcount field in the t7xxport EnumMsghandler function. This...

8.8CVSS5.8AI score0.00403EPSS
SaveExploits0References2
Rows per page
Query Builder