Lucene search
+L

114372 matches found

Snyk
Snyk
added 2026/08/13 9:43 p.m.18 views

Denial of Service (DoS)

Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to Denial of Service DoS. Go Vulnerability Report:When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain th...

8.7CVSS5.9AI score0.00568EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/13 6:51 p.m.39 views

nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections...

6.3CVSS5.4AI score0.00253EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/08/13 6:49 p.m.12 views

nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections...

6.3CVSS5.4AI score0.00253EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/13 12:10 p.m.6 views

CLEANSTART-2026-HN48536 Security fixes in grafana-agent-operator 0.44.3-r1

Package grafana-agent-operator version 0.44.3-r1 fixes 6 vulnerabilities: CVE-2026-39828, ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv, ghsa-x527-x647-q7gg...

8.8CVSS5.2AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/13 8:31 a.m.18 views

CVE-2026-19481 @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

7.5CVSS5.4AI score
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/13 1:33 a.m.11 views

SUSE CVE-2026-34501

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

8.2CVSS5.3AI score0.00508EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2026/08/13 12:00 a.m.17 views

nghttp2 security update

1.68.0-3.2 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055...

6.3CVSS5.7AI score0.00253EPSS
SaveExploits0
OSV
OSV
added 2026/08/13 12:00 a.m.9 views

ALSA-2026:54662 Moderate: nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...

6.3CVSS5.7AI score0.00253EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2026/08/13 12:00 a.m.12 views

nghttp2 security update

1.43.0-6.2 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055...

6.3CVSS5.6AI score0.00253EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2026/08/13 12:00 a.m.16 views

Dnsmasq: Multiple Vulnerabilities

Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Multiple vulnerabilities have been discovered in Dnsmasq. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

7.5CVSS7.7AI score0.08849EPSS
SaveExploits1
OSV
OSV
added 2026/08/13 12:00 a.m.3 views

OPENSUSE-SU-2026:11505-1 jetty-annotations-9.4.58-5.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-5.1 package on the GA media of openSUSE Tumbleweed...

9.1CVSS5.4AI score0.00483EPSS
SaveExploits1References1
OSV
OSV
added 2026/08/13 12:00 a.m.8 views

ALSA-2026:54650 Moderate: nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...

6.3CVSS5.7AI score0.00253EPSS
SaveExploits0References4
Gentoo Linux
Gentoo Linux
added 2026/08/13 12:00 a.m.10 views

Apache HTTPD: Multiple Vulnerabilities

Background The Apache HTTP server is one of the most popular web servers on the Internet. Description Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

7.5CVSS7.1AI score0.99999EPSS
SaveExploits21
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.13 views

CVE-2026-68454 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68454 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

8.8CVSS5.3AI score0.00129EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.12 views

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

8.8CVSS5.3AI score0.0013EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.15 views

CVE-2026-68149 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68149 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

8.4CVSS5.3AI score0.00135EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.10 views

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

7.5CVSS5.3AI score0.0023EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.8 views

CVE-2026-68100 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68100 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

8.1CVSS5.3AI score0.00435EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.11 views

CVE-2026-64250 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64250 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

5.5CVSS5.3AI score0.00111EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.10 views

CVE-2026-63810 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-63810 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

5.3AI score0.00187EPSS
SaveExploits0
Rows per page
Query Builder