Lucene search
K

198 matches found

RedHat Linux
RedHat Linux
added 2026/05/19 4:21 p.m.7 views

nginx: NGINX: Arbitrary Code Execution Vulnerability

A flaw was found in NGINX, specifically within the ngxhttprewritemodule. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in...

9.2CVSS6.6AI score0.00897EPSS
Exploits34References6
RedHat Linux
RedHat Linux
added 2026/05/15 4:17 p.m.4 views

nginx: NGINX: Arbitrary Code Execution Vulnerability

A flaw was found in NGINX, specifically within the ngxhttprewritemodule. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in...

9.2CVSS6.6AI score0.00897EPSS
Exploits34References6
OSV
OSV
added 2026/03/27 7:10 a.m.3 views

BIT-NGINX-2026-27654 NGINX ngx_http_dav_module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names...

8.8CVSS6.1AI score0.00021EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/03/25 12:27 a.m.2 views

SUSE CVE-2026-27654

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names...

8.2CVSS6.1AI score0.00021EPSS
Exploits0References10
Cvelist
Cvelist
added 2026/03/24 2:13 p.m.19 views

CVE-2026-27651 NGINX ngx_mail_auth_http_module vulnerability

When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when 1 CRAM-MD5 or APOP authentication is enabled, and 2 the authentication server permits retry by returning the Auth-Wait...

8.7CVSS0.00064EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2011-0002

Malware in sbrugna...

6.9CVSS6.1AI score0.00047EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-2799

Malware in sbrugna...

7.5CVSS6AI score0.00712EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-3247

Malware in sbrugna...

7.5CVSS7.4AI score0.00649EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-8641

Malware in sbrugna...

8.2CVSS7.1AI score0.04022EPSS
Exploits1References19
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2011-3832

Malware in sbrugna...

6.8CVSS6.1AI score0.00516EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-11493

Malware in sbrugna...

5.3CVSS5.3AI score0.00382EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-5439

Malware in sbrugna...

7.5CVSS7.6AI score0.03589EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-3998

Malware in sbrugna...

5CVSS5.8AI score0.08988EPSS
Exploits0References18
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-18248

Malicious code in bioql PyPI...

5.6CVSS6.2AI score0.00303EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-44913

Malicious code in bioql PyPI...

7.1CVSS7.2AI score0.00088EPSS
Exploits2References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34446

Malicious code in bioql PyPI...

4.8CVSS5.7AI score0.00832EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-58107

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.01879EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-25043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a string index out of range error and worker-process crash for a Cookie: =abc...

5.3CVSS6.1AI score0.00382EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2014-3199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous...

5CVSS7.9AI score0.00832EPSS
Exploits0References2
Veracode
Veracode
added 2025/06/18 10:20 a.m.3 views

Denial Of Service (DoS)

Salt is vulnerable to Denial Of Service DoS. The vulnerability is due to unsanitized input handling due to the pubret method using an unvalidated jid value to construct a file path, which can be exploited to cause worker process hangs through crafted read operations...

5.6CVSS5.2AI score0.00303EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder