Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    GSD-2024-27131

    Vulnerability from gsd - Updated: 2024-02-21 06:02
    Details
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    Aliases
    To clipboard 

    {
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-27131"
      ],
      "id": "GSD-2024-27131",
      "modified": "2024-02-21T06:02:38.572351Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-27131",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

    WID-SEC-W-2024-1195

    Vulnerability from csaf_certbund - Published: 2024-05-20 22:00 - Updated: 2024-05-21 22:00
    Summary
    QNAP NAS: Mehrere Schwachstellen
    Severity
    Hoch
    Scope
    7 vulnerabilities in this advisory, including CVE-2024-27131.
    CVE-2024-27131

    Es besteht eine Schwachstelle in QNAP NAS im Zusammenhang mit "x-forwarded-for" Headern verursacht. Ein entfernter, authentifizierter Angreifer kann diese Schwachstelle ausnutzen, um Logdaten zu fälschen.

    Known affected: 3 products
    Open the full advisory