Lucene search
+L

14 matches found

osv_cve
osv_cve
•added 2026/10/26 10:00 a.m.•12 views

CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

6.9CVSS5.1AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2026/10/26 10:00 a.m.•26 views

CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

6.9CVSS0.00683EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/10/26 12:00 a.m.•5 views

PGYER CodeFever path traversal vulnerability

The PGYER CodeFever has a path traversal vulnerability. This vulnerability stems from improper handling of the uristring parameter by the detail function in the file application/controllers/doc.php, potentially leading to path traversal...

6.9CVSS5.9AI score0.00683EPSS
SaveExploits0References8
Microsoft CVE
Microsoft CVE
•added 2026/09/03 8:04 a.m.•23 views

uri_string does not bound the port component of a URI before integer conversion

...

6.9CVSS7.3AI score0.0071EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/03 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-59696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/01 3:17 p.m.•20 views

CVE-2026-59696

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS0.0071EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2026/09/01 3:17 p.m.•23 views

UBUNTU-CVE-2026-59696

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/01 2:37 p.m.•55 views

CVE-2026-59696

CVE-2026-59696 is an Improper Validation of Specified Quantity in Input flaw in Erlang/OTP stdlib where uri_string:get_port/1 passes the URI port substring to binary_to_integer/1 with no length bound. A syntactically valid port of up to ~1.26 million digits converts successfully, costing the call...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/01 2:37 p.m.•53 views

CVE-2026-59696 uri_string does not bound the port component of a URI before integer conversion

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS0.0071EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/09/01 2:37 p.m.•26 views

CVE-2026-59696

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0
osv_eef
osv_eef
•added 2026/09/01 2:37 p.m.•27 views

EEF-CVE-2026-59696 uri_string does not bound the port component of a URI before integer conversion

Summary Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/09/01 2:37 p.m.•22 views

CVE-2026-59696 uri_string does not bound the port component of a URI before integer conversion

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/09/01 2:37 p.m.•20 views

CVE-2026-59696 uri_string does not bound the port component of a URI before integer conversion

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS7.1AI score0.0071EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•8 views

CVE-2026-59696: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

6.9CVSS7.2AI score0.0071EPSS
SaveExploits0References2
Rows per page
Query Builder