curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 10.3%.
SQLi
Curl
Libcurl
NVD
GitHub
CVSS 2.0
7.5
EPSS
10.3%
The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 supports a maximum password length of 8 bytes, which makes it easier for. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
H0 Ecom
H0 Ecom100
H2 Ecom
H2 Ecom F
+4
NVD
CVSS 2.0
7.5
EPSS
0.4%