Lucene search
K

15 matches found

OSV
OSV
added 2026/02/13 12:16 p.m.1 views

UBUNTU-CVE-2026-2443

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server...

5.3CVSS7.1AI score0.00036EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/13 11:58 a.m.4 views

CVE-2026-2443 Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server...

5.3CVSS5.6AI score0.00036EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-7125

Malware in sbrugna...

5CVSS6.4AI score0.01389EPSS
Exploits2References8
Tenable Nessus
Tenable Nessus
added 2025/02/07 12:0 a.m.2 views

Cisco Secure Web Appliance Range Request Bypass (cisco-sa-swa-range-bypass-2BsEHYSu)

According to its self-reported version, Cisco Secure Web Appliance Range Request Bypass is affected by a vulnerability. - A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an...

5.8CVSS5.6AI score0.00289EPSS
Exploits0References3
OSV
OSV
added 2025/02/05 5:15 p.m.2 views

CVE-2025-20183

A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability i...

5.3CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/05 12:0 a.m.2 views

PT-2025-5708 · Cisco · Cisco Secure Web Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Web Appliance affected versions not specified Description: A vulnerability in the policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an...

5.8CVSS7AI score0.00289EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/02/28 12:0 a.m.1 views

Rack Resource Management Error Vulnerability

Rack is a modular Ruby web server interface. A resource management error vulnerability exists in Rack versions prior to 3.0.9.1, 2.2.8.1, and 2.2.8.1, which stems from a crafted Range header that may cause the server to respond abnormally, resulting in a denial of service...

7.5CVSS6.6AI score0.0041EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/08 12:26 a.m.45 views

Security Bulletin: Potential security exposure with IBM HTTP Server 8.0 and earlier (PM46234) (CVE-2011-3192)

Summary Crafted range requests can result in potential denial of service with IBM HTTP Server IHS. Vulnerability Details Potential denial of service from attack using crafted range requests CVE Reference: CVE-2011-3192. Affected Products and Versions Affected: IBM HTTP Server IHS Versions 2.0...

7.8CVSS7.6AI score0.90865EPSS
Exploits17Affected Software3
Prion
Prion
added 2014/09/11 6:55 p.m.25 views

Design/Logic Flaw

HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service crash via a request with crafted "Range headers with unidentifiable byte-range values."...

5CVSS6.8AI score0.8285EPSS
Exploits0References14Affected Software1
OSV
OSV
added 2014/08/28 3:31 a.m.0 views

USN-2327-1 squid3 vulnerability

Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a denial of service...

5CVSS7.1AI score0.8285EPSS
Exploits0References2
Prion
Prion
added 2014/04/14 3:9 p.m.25 views

Server side request forgery (ssrf)

Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service assertion failure via a crafted range request, related to state management...

5CVSS6.8AI score0.54968EPSS
Exploits1References9Affected Software2
UbuntuCve
UbuntuCve
added 2014/04/14 3:9 p.m.28 views

CVE-2014-0128

Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service assertion failure via a crafted range request, related to state management...

5CVSS7.2AI score0.54968EPSS
Exploits1References2
Prion
Prion
added 2010/06/10 12:30 a.m.13 views

Default credentials

Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service crash via a crafted Range header...

5CVSS7AI score0.00676EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2010/06/10 12:0 a.m.46 views

CVE-2010-2262

Weborf webserver (Galileo Students Team Weborf) is affected by a Denial of Service in versions before 0.12.1. The vulnerability is triggered by a crafted Range header, causing the server to crash. The issue is documented in multiple sources (e.g., Weborf

5CVSS6.7AI score0.00676EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2010/06/10 12:0 a.m.19 views

CVE-2010-2262

Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service crash via a crafted Range header...

5CVSS4.9AI score0.00676EPSS
Exploits0
Rows per page
Query Builder