Lucene search
+L

3447 matches found

NVD
NVD
added 2012/06/13 4:46 a.m.22 views

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

4.3CVSS6.8AI score0.01863EPSS
SaveExploits1References1
Prion
Prion
added 2012/06/13 4:46 a.m.24 views

Crlf injection

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

4.3CVSS7.4AI score0.01863EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2012/06/13 1:0 a.m.64 views

CVE-2012-2041

CVE-2012-2041 describes a CRLF injection in the Component Browser of Adobe ColdFusion 8.0–9.0.1 , enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Public references point to Adobe’s APSB12-15 security bulletin, which provided ...

4.3CVSS7AI score0.01863EPSS
SaveExploits1References1Affected Software1
exploitpack
exploitpack
added 2012/06/05 12:0 a.m.26 views

pyrocms 2.1.1 - Multiple Vulnerabilities

pyrocms 2.1.1 - Multiple Vulnerabilities PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it w...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/06/05 12:0 a.m.37 views

pyrocms 2.1.1 - Multiple Vulnerabilities

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was built with modularity in mind...

5.3AI score
SaveExploits0
0day.today
0day.today
added 2012/06/04 12:0 a.m.35 views

PyroCMS 2.1.1 CRLF Injection / Stored Cross Site Scripting

Exploit for php platform in category web applications PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/06/04 12:0 a.m.29 views

PyroCMS 2.1.1 CRLF Injection / Stored Cross Site Scripting

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was built with modularity in mind...

0.3AI score
SaveExploits0
NVD
NVD
added 2012/05/27 8:55 p.m.37 views

CVE-2012-2943

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter...

5CVSS6.3AI score0.01992EPSS
SaveExploits0References3
Prion
Prion
added 2012/05/27 8:55 p.m.16 views

Crlf injection

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter...

5CVSS7.4AI score0.01992EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2012/05/27 8:0 p.m.34 views

CVE-2012-2943

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter...

6.3AI score0.01992EPSS
SaveExploits0References3
CVE
CVE
added 2012/05/27 8:0 p.m.80 views

CVE-2012-2943

CVE-2012-2943 describes a CRLF injection in Cryptographp’s cryptographp.inc.php, exploitable via the cfg parameter to inject arbitrary HTTP headers and enable HTTP response splitting. Connected documents tie this to Monstra CMS 3.0.4 as a related issue (through CVE-2018-16979), but explicit fixes...

5CVSS6.2AI score0.01992EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2012/05/23 8:55 p.m.1 views

DEBIAN-CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

5CVSS7.5AI score0.01362EPSS
SaveExploits0References1
NVD
NVD
added 2012/05/23 8:55 p.m.9 views

CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

5CVSS6.7AI score0.01362EPSS
SaveExploits0References5
OSV
OSV
added 2012/05/23 8:55 p.m.3 views

CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

6.7AI score
SaveExploits0References5
Prion
Prion
added 2012/05/23 8:55 p.m.7 views

Crlf injection

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

5CVSS7.3AI score0.01362EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2012/05/23 8:55 p.m.17 views

PYSEC-2012-5

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

5CVSS5.3AI score0.01362EPSS
SaveExploits0References6
CVE
CVE
added 2012/05/23 8:0 p.m.64 views

CVE-2012-2374

CVE-2012-2374 is a Tornado CRLF injection vulnerability in the function tornado.web.RequestHandler.set_header, where input crafted by an attacker can inject arbitrary HTTP headers and enable HTTP response splitting. The issue affects Tornado versions prior to 2.2.1. The vulnerability enables an a...

5CVSS6.8AI score0.01362EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2012/05/23 8:0 p.m.46 views

CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

5CVSS6.9AI score0.01362EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2012/05/21 12:0 a.m.5 views

PT-2012-2921 · Postgresql +3 · Postgresql +3

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 8.3.x through 8.3.17 PostgreSQL versions 8.4.x through 8.4.10 PostgreSQL versions 9.0.x through 9.0.6 PostgreSQL versions 9.1.x through 9.1.2 Description: The issue allows user-assisted remote attackers to execute arbitrar...

9.8CVSS8.9AI score0.54312EPSS
SaveExploits22References79
Tenable Nessus
Tenable Nessus
added 2012/05/17 12:0 a.m.29 views

SuSE 10 Security Update : flash-player (ZYPP Patch Number 2969)

This security update brings the Adobe Flash Player to version 7.0.69. It fixes the following security problem : - CRLF injection vulnerability in Adobe Flash Player allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in...

5CVSS5.6AI score0.23148EPSS
SaveExploits0References2
Rows per page
Query Builder