Lucene search
+L

16532 matches found

UbuntuCve
UbuntuCve
•added 2022/06/27 9:15 p.m.•46 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.7AI score0.0235EPSS
SaveExploits1References8
Prion
Prion
•added 2022/06/27 9:15 p.m.•25 views

Design/Logic Flaw

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

6.4CVSS6.5AI score0.0235EPSS
SaveExploits1References11Affected Software1
osv_cve
osv_cve
•added 2022/06/27 12:00 a.m.•34 views

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.4AI score
SaveExploits0References13
Mend
Mend
•added 2022/06/27 12:00 a.m.•4 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS0.0235EPSS
SaveExploits1References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/27 12:00 a.m.•5 views

CVE-2022-31081: Inconsistent Interpretation of HTTP Requests

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.8AI score0.0235EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/06/27 12:00 a.m.•45 views

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS7AI score0.0235EPSS
SaveExploits1References11
Debian CVE
Debian CVE
•added 2022/06/27 12:00 a.m.•70 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.9AI score0.0235EPSS
SaveExploits1
CVE
CVE
•added 2022/06/27 12:00 a.m.•666 views

CVE-2022-31081

CVE-2022-31081 affects the Perl HTTP::Daemon library. Versions prior to 6.15 are vulnerable due to improper handling of the Content-Length header, which could enable HTTP request smuggling and potentially allow privileged access to APIs or poisoning of intermediate caches. The issue is documented...

7.3CVSS6.7AI score0.0235EPSS
SaveExploits1References11Affected Software1
CNNVD
CNNVD
•added 2022/06/27 12:00 a.m.•17 views

HTTP::Daemon 环境问题漏洞

HTTP::Daemon is a simple HTTP class. An environmental issue vulnerability exists in HTTP::Daemon versions prior to 6.15. An attacker could exploit this vulnerability to gain privileged access to the API or poison the intermediate cache...

7.3CVSS6.5AI score0.0235EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2022/06/27 12:00 a.m.•17 views

PT-2022-4815 · Nginx +8 · Nginx +8

Name of the Vulnerable Software and Affected Versions: HTTP::Daemon versions prior to 6.15 Description: The issue is related to inconsistent interpretation of HTTP requests when handling Content-Length values, potentially allowing a remote attacker to gain privileged access to APIs or poison...

7.5CVSS9.2AI score0.0235EPSS
SaveExploits1References52
Vulnrichment
Vulnrichment
•added 2022/06/27 12:00 a.m.•4 views

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS7.4AI score0.0235EPSS
SaveExploits1References11
osv_oesa
osv_oesa
•added 2022/06/24 11:04 a.m.•13 views

OESA-2022-1722 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in the libvirt nwfilter driver. The...

4.3CVSS6.7AI score0.01049EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2022/06/21 2:57 p.m.•150 views

USN-5489-1: QEMU vulnerabilities

Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. CVE-2021-3507 It was discovered that QEMU incorrectly...

8.2CVSS7.5AI score0.02743EPSS
SaveExploits5
osv_usn
osv_usn
•added 2022/06/21 2:57 p.m.•16 views

USN-5489-1 qemu vulnerabilities

Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. CVE-2021-3507 It was discovered that QEMU incorrectly...

8.2CVSS6.9AI score0.02743EPSS
SaveExploits5References8
Packet Storm
Packet Storm
•added 2022/06/20 12:00 a.m.•1396 views

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Hardcoded Backdoor User and Outdated Software Components product: Nexans FTTO GigaSwitch industrial/office switches HW version 5 vulnerable version: See "Vulnerable /...

10CVSS7AI score0.94558EPSS
SaveExploits52
osv_debian
osv_debian
•added 2022/06/16 4:15 p.m.•6 views

DEBIAN-CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS7AI score0.01069EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/16 4:15 p.m.•11 views

CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS7.1AI score0.01069EPSS
SaveExploits0References3
NVD
NVD
•added 2022/06/16 4:15 p.m.•35 views

CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS0.01069EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/16 4:15 p.m.•27 views

Double free

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

5CVSS7.4AI score0.01069EPSS
SaveExploits0References2Affected Software2
osv_ubuntu
osv_ubuntu
•added 2022/06/16 4:15 p.m.•14 views

UBUNTU-CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS5.8AI score0.01069EPSS
SaveExploits0References5
Rows per page
Query Builder