PT-2014-2660

Name of the Vulnerable Software and Affected Versions Belkin N300 F7D7301v1 router Description The issue allows remote attackers to bypass authentication and gain privileges due to incorrect validation of the HTTP Authorization header. Recommendations For the Belkin N300 F7D7301v1 router, conside...

CVE-2013-3092: Improper Authentication

The Belkin N300 F7D7301v1 router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect validation of the HTTP Authorization header...

UBUNTU-CVE-2014-1829

Requests aka python-requests before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request...

PT-2014-4318

Name of the Vulnerable Software and Affected Versions Requests aka python-requests versions prior to 2.3.0 Description The issue allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request. Recommendations For versions prior to 2.3.0, update to...

CVE-2014-1829

Requests aka python-requests before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request...

UBUNTU-CVE-2014-1830

Requests aka python-requests before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request...

Security issue when parsing the Authorization header

More info at https://symfony.com/cve-2014-6061...

MailEnable Authorization Header Buffer Overflow

No description provided by source. $Id: mailenableauthheader.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Fedora Update for nodejs-aws-sign FEDORA-2013-11780

Check for the Version of nodejs-aws-sign OpenVAS Vulnerability Test Fedora Update for nodejs-aws-sign FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Authorization

Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header...

CVE-2011-5253

CVE-2011-5253 affects Download Ticket Service (versions 0.3–0.9). The issue allows remote attackers to login as an arbitrary user by supplying an authorization header. The provided connected documents confirm the vulnerability statement but do not specify affected platforms beyond the version ran...

CVE-2011-5253

Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header...

PT-2013-1468

Name of the Vulnerable Software and Affected Versions Dl Download Ticket Service versions 0.3 through 0.9 Description The issue allows remote attackers to login as an arbitrary user by supplying an authorization header. Recommendations For versions 0.3 through 0.9, consider disabling the login...

CVE-2011-5253: Improper Authentication

Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header...

UBUNTU-CVE-2012-0647

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

CVE-2012-0647

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

CVE-2012-0647: Exposure of Sensitive Information to an Unauthorized Actor

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

DEBIAN-CVE-2011-1498

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header...

CVE-2011-1498

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header...

PT-2011-3165

Name of the Vulnerable Software and Affected Versions Apache HttpClient versions 4.0 through 4.1.0 Description The issue allows remote web servers to obtain sensitive information by logging the Proxy-Authorization header, which is sent to the origin server when Apache HttpClient is used with an...