CVE-2022-2880

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...

CVE-2022-2880

CVE-2022-2880 affects golang under the net/http/httputil ReverseProxy: requests forwarded may include raw/unparsable inbound query parameters, enabling query parameter smuggling if the proxy forwards such values. The issue is mitigated by the fix that sanitizes forwarded query parameters when the...

CVE-2022-2880 Incorrect sanitization of forwarded query parameters in net/http/httputil

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...

CVE-2022-2880 Incorrect sanitization of forwarded query parameters in net/http/httputil

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...

FreeBSD : go -- multiple vulnerabilities (854c2afb-4424-11ed-af97-adcabf310f9b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 854c2afb-4424-11ed-af97-adcabf310f9b advisory. - The Go project reports: archive/tar: unbounded memory consumption when reading headers...

SUSE: Security Advisory (SUSE-SU-2022:2880-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: dpdk / dpdk-devel / dpdk-doc / dpdk-examples / dpdk-kmp-default / etc (SUSE-SU-2022:2880-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2880-1 advisory. This update of dpdk fixes the following issue: - Fix to read PCI device name as UTF strings bsc1198873 - Allow configuring...

SUSE: Security Advisory (SUSE-SU-2020:2880-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2880

creationtimestamp| type| source ---|---|--- 2020-04-15 20:14:23+00:00| seen| https://t.me/cibsecurity/11273...

CVE-2020-2880

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: OTA Training Activities. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2880

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: OTA Training Activities. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2880

Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications component: Security. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Store...

CVE-2020-2880

CVE-2020-2880 affects Oracle E-Business Suite Oracle Learning Management (OTA Training Activities). Vulnerable versions: 12.1.1–12.1.3 and 12.2.3–12.2.9. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Learning Management; attacks may grant unauthor...

CVE-2019-2880

Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications component: Security. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Store...

CVE-2019-2880

CVE-2019-2880 : Vulnerability in Oracle Retail Store Inventory Management (a component of Oracle Retail Applications). Affected product/version: 16.0. Exploitation scenario: low-privilege attacker with network access via HTTP can compromise the system, potentially leading to takeover. CVSS 3.0 ba...

CVE-2018-2880

The CVE-2018-2880 vulnerability affects Oracle MICROS Retail-J (Back Office) in version 12.1.2, where an unauthenticated attacker can access MICROS Retail-J over HTTP, potentially exposing or fully accessing sensitive data. The root cause is a misconfiguration/ flaw in access control for the Back...

Security Bulletin: IBM QRadar SIEM contains hard-coded credentials (CVE-2016-2880)

Summary An IBM QRadar SIEM user with shell access could obtain the encryption key used to encrypt certain passwords. Vulnerability Details CVEID: CVE-2016-2880 DESCRIPTION: IBM QRadar stores the encryption key used to encrypt the service account password which can be obtained by a local user. CVS...

CVE-2017-2880

An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability...

CVE-2017-2880

CVE-2017-2880 affects Computerinsel Photoline 20.02, specifically the GIF parsing code. A memory corruption vulnerability arises from reading a byte from the GIF stream (byte value used to control a loop) that drives memory writes, potentially leading to memory overflow and remote code execution....

CVE-2015-2880

CVE-2015-2880 affects the TRENDnet WiFi Baby Cam TV-IP743SIC. A backdoor root account exists with the password admin, enabling privilege acquisition on a networked device. NVD metrics: CVSSv3 base score 8.8 (HIGH), vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; CVSSv2 base 9.0 (HIGH). Public source...